Static task
static1
Behavioral task
behavioral1
Sample
1a19302df019aac8f1a74ff98a56c3d3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a19302df019aac8f1a74ff98a56c3d3.exe
Resource
win10v2004-20231215-en
General
-
Target
1a19302df019aac8f1a74ff98a56c3d3
-
Size
215KB
-
MD5
1a19302df019aac8f1a74ff98a56c3d3
-
SHA1
c305d0b43a4458678f5eb57d5924a5ec54ce05f8
-
SHA256
e42257520a4167e6b127d171e6464c0f175eb9d261ae73018d657c6a39dc8d4f
-
SHA512
98d5d1712b03bad1928ca3737d737ea865ae199b99aa5803aff3a4e6ddbad407ae06be09ab1b4287d8521b794e9c61bbf6a71c11220753ce35ccd9a9e919ff30
-
SSDEEP
3072:AqdnXRD8QGdTwwIw9+pvUHSfOqpzrmpHDv90zbFXOQ/uvIypULOD9i8kcx+I3BIm:RdY/9+hUe4pHDvmHx1uvIMtdEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a19302df019aac8f1a74ff98a56c3d3
Files
-
1a19302df019aac8f1a74ff98a56c3d3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Leem Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE