Static task
static1
Behavioral task
behavioral1
Sample
319b8b4f833b7a319dae6c6ff148d0ec75f83ac6f031678a54ab31a5ab360c39.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
319b8b4f833b7a319dae6c6ff148d0ec75f83ac6f031678a54ab31a5ab360c39.exe
Resource
win10v2004-20240226-en
General
-
Target
319b8b4f833b7a319dae6c6ff148d0ec75f83ac6f031678a54ab31a5ab360c39.exe
-
Size
159KB
-
MD5
538cc587125f738ae81e2e4fe28c0084
-
SHA1
7aa3c65496b968c3641b7d7db1849ad4715053d6
-
SHA256
319b8b4f833b7a319dae6c6ff148d0ec75f83ac6f031678a54ab31a5ab360c39
-
SHA512
770eafcaa7ede802b61d6483fad9a4eff6161867c5d7f78b4ee2dfd01002425b56c09c52dea495b3b43b80f6ecfb966dedf79a08e0316f018b1cde929524bf2b
-
SSDEEP
3072:UP2iydi+7Jtzet46rSIskyH39vIe3EZ8CbsZEE6tLJSp8Bb8EG:edIfzetJFyXRlCbeV6tH8EG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319b8b4f833b7a319dae6c6ff148d0ec75f83ac6f031678a54ab31a5ab360c39.exe
Files
-
319b8b4f833b7a319dae6c6ff148d0ec75f83ac6f031678a54ab31a5ab360c39.exe.exe windows:5 windows x86 arch:x86
4e06c011d59529bff8e1f1c88254b928
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_mbsstr
memset
_mbsnbcpy
Sections
.text Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 864B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE