Static task
static1
Behavioral task
behavioral1
Sample
19f1a888d48278cb8f726ea0e52486786426f867c3ab858b9cea81b291268664.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19f1a888d48278cb8f726ea0e52486786426f867c3ab858b9cea81b291268664.exe
Resource
win10-20240404-en
General
-
Target
19f1a888d48278cb8f726ea0e52486786426f867c3ab858b9cea81b291268664
-
Size
1.2MB
-
MD5
0d7160fca3e3b783b211caa87f8b421f
-
SHA1
a00c2c2c7cc1bc487917da8778f50955040bb1de
-
SHA256
19f1a888d48278cb8f726ea0e52486786426f867c3ab858b9cea81b291268664
-
SHA512
9320b5ce51ceb474528688e5aa93a4e087ba1edaf9ec9b5050f174ef9156eb417022667c55018e48f0f0d31d7c6f5e50b7a13f825421c6ece2fcbcf9dfc50e5c
-
SSDEEP
24576:UEr4+wO+sjOuxy0psfjgUjMKOfM3qCFPZOGCu:U5jEt/s8jCau
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f1a888d48278cb8f726ea0e52486786426f867c3ab858b9cea81b291268664
Files
-
19f1a888d48278cb8f726ea0e52486786426f867c3ab858b9cea81b291268664.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 717KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 473KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ