Static task
static1
Behavioral task
behavioral1
Sample
195d4c965f2be38364f6ac3efb7fb104.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
195d4c965f2be38364f6ac3efb7fb104.exe
Resource
win10v2004-20240226-en
General
-
Target
195d4c965f2be38364f6ac3efb7fb104
-
Size
1.7MB
-
MD5
195d4c965f2be38364f6ac3efb7fb104
-
SHA1
6eae0542d4530d04b8b3e2678dca55abd6987e6e
-
SHA256
81eafb28b1c73cb42e25be3aa09e1b6a41a48a3ff4f1c2d95714d136c42fd41c
-
SHA512
a154e24421aea34c2a2101a77fbff26e47b0f22a355dd03309a9224db7427aa58182cbcb56e2f3bea4407488023b11c7db3905d6ddcfadecd2daadf36a11ed77
-
SSDEEP
49152:3carPoe/geG0qHeTZATJoxJT3SNAHAjWwm:sgbgenq+T/8w3l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 195d4c965f2be38364f6ac3efb7fb104
Files
-
195d4c965f2be38364f6ac3efb7fb104.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE