Static task
static1
Behavioral task
behavioral1
Sample
a19f56b5c8ec9e5094084c4a8734f32b3caf8c4eeae8933cf0b19cbc992e84ecN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a19f56b5c8ec9e5094084c4a8734f32b3caf8c4eeae8933cf0b19cbc992e84ecN.exe
Resource
win10v2004-20241007-en
General
-
Target
a19f56b5c8ec9e5094084c4a8734f32b3caf8c4eeae8933cf0b19cbc992e84ecN
-
Size
413KB
-
MD5
328efb86b0fd50689bdb6fb5843b85c0
-
SHA1
ded09c8d8a4f8a3e8d7bffd162223cbb8e52e50d
-
SHA256
a19f56b5c8ec9e5094084c4a8734f32b3caf8c4eeae8933cf0b19cbc992e84ec
-
SHA512
62125925165c4670a5b4fa86ea6d46dd82c0e92fa78c947d00c5fd6cee37e34241bde38f848ded13b8df250b8cec899d2b419abded8e5b3051fca0424ad6034c
-
SSDEEP
12288:jzi2eIxIhVDPy9lESOqnPDUOptQ8OHAOIx:f9eIGzW9lD/DUOptXOgOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a19f56b5c8ec9e5094084c4a8734f32b3caf8c4eeae8933cf0b19cbc992e84ecN
Files
-
a19f56b5c8ec9e5094084c4a8734f32b3caf8c4eeae8933cf0b19cbc992e84ecN.exe windows:5 windows x86 arch:x86
ff85ea60e025aabc3ccce228ae4f7364
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
VkKeyScanW
kernel32
LocalAlloc
shlwapi
PathIsUNCA
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_ecx Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_eax Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_esp Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_edx Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_ebp Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_ebx Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_edi Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE