Static task
static1
Behavioral task
behavioral1
Sample
319f4f7b3d155c7a428e4699560f7810N.exe
Behavioral task
behavioral2
Sample
319f4f7b3d155c7a428e4699560f7810N.exe
General
-
Target
319f4f7b3d155c7a428e4699560f7810N.exe
-
Size
17KB
-
MD5
319f4f7b3d155c7a428e4699560f7810
-
SHA1
6d3d7a7a8a2826439c97724bda5f37c281a536ca
-
SHA256
a0631699f7dd118d740475e5f9c8c6b43b366b51ce3cc27cf0e87ee51b7b6f4d
-
SHA512
37e5efc8ac520d492bd17372085c829ad2b6c7de8aa02c1172741d5fe2c9bee51eee5cc3f734a55f60415aae1725d5944e96eebf9dac67ab819655593e17cd42
-
SSDEEP
192:0CzWzqpO7+FelcpEe07Y7tkhFDcKWnLyHEiPvwdOF6ZHWJoqNe:vzWzq6yKY7UwKWKHGHJl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319f4f7b3d155c7a428e4699560f7810N.exe
Files
-
319f4f7b3d155c7a428e4699560f7810N.exe.exe windows:4 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zpha Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE