Static task
static1
Behavioral task
behavioral1
Sample
19a16fd5268f16ee1f5c6befcf6eee77.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19a16fd5268f16ee1f5c6befcf6eee77.exe
Resource
win10v2004-20231215-en
General
-
Target
19a16fd5268f16ee1f5c6befcf6eee77
-
Size
489KB
-
MD5
19a16fd5268f16ee1f5c6befcf6eee77
-
SHA1
980ee4f23f80149971279beaafe806bb8c887ea2
-
SHA256
23f1f6a747164760e919662d529741dde601804ebf42d30d1d4709b7369b69a0
-
SHA512
71412f56e41907d21ce13d8dd9e383e53568e2fec7376c809d03b4c709a300e8de78b1606afd5b755d0ac7f17deade2adf2e4e4949a24f5b2b1a706fb14e2f23
-
SSDEEP
12288:fppEezu8dDFSuh0CBY6w0oStKShu8ya/Z7V5ExFrE9:BpCsAu3Jw0/twqJ5gNc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19a16fd5268f16ee1f5c6befcf6eee77
Files
-
19a16fd5268f16ee1f5c6befcf6eee77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 50KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 432KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE