Static task
static1
Behavioral task
behavioral1
Sample
19e4c4f601f1459b6755776c7aec2604.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19e4c4f601f1459b6755776c7aec2604.exe
Resource
win10v2004-20231215-en
General
-
Target
19e4c4f601f1459b6755776c7aec2604
-
Size
556KB
-
MD5
19e4c4f601f1459b6755776c7aec2604
-
SHA1
71d8398652a891d09492db64bc1458349ba4cdbc
-
SHA256
9460ffe580332fe64bb4f35bb63dc6a4302f3613718a04dc0986cea989160039
-
SHA512
f3142590ecc73245295b1cf0f2b4188fa547f35adb2103efba55db8629c730727ac0beef73034950aec0e87297f7be1acfb2bcffc6b238c4386499356f527696
-
SSDEEP
12288:KsztnZfvdeneL2iNF2iNi4QissaMJcR/V:KspZF1j1esId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19e4c4f601f1459b6755776c7aec2604
Files
-
19e4c4f601f1459b6755776c7aec2604.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 544KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ