Static task
static1
Behavioral task
behavioral1
Sample
19d98ba19c6fe2b81df2c840ca493bb0a53025d7d3427ef25274b8e8914b4d3a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19d98ba19c6fe2b81df2c840ca493bb0a53025d7d3427ef25274b8e8914b4d3a.exe
Resource
win10v2004-20231222-en
General
-
Target
19d98ba19c6fe2b81df2c840ca493bb0a53025d7d3427ef25274b8e8914b4d3a
-
Size
130KB
-
MD5
fc8357e9000fc2dfae27a911ef5583ce
-
SHA1
4d161e1a83825dbdce4e71e47dafc5a3085249ef
-
SHA256
19d98ba19c6fe2b81df2c840ca493bb0a53025d7d3427ef25274b8e8914b4d3a
-
SHA512
b1a44ce66cd1aa11e8409979a015399be54df05c3e0f64228e76563e0c99ad42337cf9fd7e22d209f031f76d64b9ff975eb132bf1933a3da6451059356cdeec8
-
SSDEEP
3072:l0gypaPW1FI0tGQ5HoHXq8tGwh9dWQfSY:SBtGQdoH6Qd/dW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d98ba19c6fe2b81df2c840ca493bb0a53025d7d3427ef25274b8e8914b4d3a
Files
-
19d98ba19c6fe2b81df2c840ca493bb0a53025d7d3427ef25274b8e8914b4d3a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ