Static task
static1
Behavioral task
behavioral1
Sample
a19c711923a556f8793555b6349de998.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a19c711923a556f8793555b6349de998.exe
Resource
win10v2004-20240221-en
General
-
Target
a19c711923a556f8793555b6349de998
-
Size
168KB
-
MD5
a19c711923a556f8793555b6349de998
-
SHA1
dd739994db1d82a53f256538203fa0eb601e444e
-
SHA256
678f5742147ac3aa801d8fb08401417c758de0d11eceda1c3b9425d4a3cf5517
-
SHA512
ae0667a9e5522e531b9e73e9aac16afa54e2e85f4be416285801b6131f722af8db29a23e93ceff8621927fe73b0cc1bec73b1fb370bb780663503b9c1377bdcc
-
SSDEEP
3072:MTD+J7BaKyhFswC7XcstVCCAVURf601GEhZH9Rm+VH1OvfbDRHVM:QD+pERItcCAC591Gy94+VH1eL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a19c711923a556f8793555b6349de998
Files
-
a19c711923a556f8793555b6349de998.exe windows:4 windows x86 arch:x86
929d67f6b1b23889c0c420711858275b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
user32
MessageBoxA
Sections
RCC0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCC1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCC2 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE