Static task
static1
Behavioral task
behavioral1
Sample
19d6b321627a78a7f0a70d34c6210c85.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19d6b321627a78a7f0a70d34c6210c85.exe
Resource
win10v2004-20231215-en
General
-
Target
19d6b321627a78a7f0a70d34c6210c85
-
Size
20KB
-
MD5
19d6b321627a78a7f0a70d34c6210c85
-
SHA1
c8ad9169d4462e3543ef5d5ad7ba4e23e56fedfd
-
SHA256
de2050109dc8a3f3ad444186aef0507753dbafa9b7c34f7ce34c20d428922a22
-
SHA512
cc0516d9343b0e69807583313dd425496d028b08aae871994825d1a9503ec4084e86fbeb711eed03486a793236dc809d356888327d5c527b6d80918590f601ff
-
SSDEEP
384:J7fMyPpC+5t+tdXuZd/RsWBbDDn93TJfv2uB230KtbIjv:FtPpC+n+PXW/VDDn9jJf+uB230KtO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d6b321627a78a7f0a70d34c6210c85
Files
-
19d6b321627a78a7f0a70d34c6210c85.exe windows:4 windows x86 arch:x86
e6b451a9833e866c1c4de310f4b321a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
ws2_32
gethostname
wininet
InternetCloseHandle
msvcrt
__set_app_type
user32
OpenClipboard
advapi32
OpenProcessToken
shell32
ShellExecuteA
msvcr70
?terminate@@YAXXZ
oleaut32
GetErrorInfo
Sections
pec1 Size: 10KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE