Static task
static1
Behavioral task
behavioral1
Sample
519c65257946770e98b713a34ee76a24.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
519c65257946770e98b713a34ee76a24.exe
Resource
win10v2004-20231215-en
General
-
Target
519c65257946770e98b713a34ee76a24
-
Size
1.0MB
-
MD5
519c65257946770e98b713a34ee76a24
-
SHA1
ffc27c978eb8629389f2c1cc242f0fb8587af497
-
SHA256
92ce21ad4b26a45de26724c4bdef19265c62ddf34ff019ca440caac9cb14e333
-
SHA512
d5a7117cc9325b61b79ef7027ea8de0d15cc3c00b2c8de23d656e964a10165344e98f21aa711da9ce75ada20a3673f128cf301aa6d78974e24e7d23cfb0e645e
-
SSDEEP
24576:uJ7CInpQpwAn8XwsKycvWsGCmzva453qNSRpYY2:o79CYgEXCmvxqNS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 519c65257946770e98b713a34ee76a24
Files
-
519c65257946770e98b713a34ee76a24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 1021KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ