Static task
static1
Behavioral task
behavioral1
Sample
19883b9ae1352802d1195d79deeb77dea248cf565f01c0b7d64555f86706914f.exe
Resource
win7-20240903-en
General
-
Target
19883b9ae1352802d1195d79deeb77dea248cf565f01c0b7d64555f86706914f
-
Size
8.5MB
-
MD5
9af0bdaf713585b40d3dfb9bf8b7db81
-
SHA1
5b56f3380a1e48f616ec021dabcb6465171cbf6f
-
SHA256
19883b9ae1352802d1195d79deeb77dea248cf565f01c0b7d64555f86706914f
-
SHA512
34034100e421c47f3f81f956ebeebd1dc3540eced0f955fbcfd1616244abb1da8e87f056ff8e2326cc336d221ef4ed34fc6eaf78c5c6dab271e7c410f3f3f97f
-
SSDEEP
98304:n+SOdtNFDWS3DKVfuimTIFddJE0VZsm6OD:nw9TQRH5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19883b9ae1352802d1195d79deeb77dea248cf565f01c0b7d64555f86706914f
Files
-
19883b9ae1352802d1195d79deeb77dea248cf565f01c0b7d64555f86706914f.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 7.0MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 833KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zyxeaaug Size: 669KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
karprlzh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE