Static task
static1
Behavioral task
behavioral1
Sample
19d0604678ae18fddd83b968fb48eaa4bd256482aefd3d131b515f4f1d9f035b.exe
Resource
win7-20240903-en
General
-
Target
19d0604678ae18fddd83b968fb48eaa4bd256482aefd3d131b515f4f1d9f035b
-
Size
3.0MB
-
MD5
351c70ccd296daf50c31dce6ff0a7fd3
-
SHA1
fa3c825f9c203dece8998c3e25c570d91ce4cbab
-
SHA256
19d0604678ae18fddd83b968fb48eaa4bd256482aefd3d131b515f4f1d9f035b
-
SHA512
7bd01c6e7e6e16489ca270b16793fec43e1dca59f83d9a2102bd783585af60d7d2b63e48bd11d0e7c76521044bd7046aea939c7c203f76ca31ff170dd31ce187
-
SSDEEP
98304:r146Qddn3C2XO/5lLWYhc98/D05tee0J:J7cyoD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d0604678ae18fddd83b968fb48eaa4bd256482aefd3d131b515f4f1d9f035b
Files
-
19d0604678ae18fddd83b968fb48eaa4bd256482aefd3d131b515f4f1d9f035b.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aerkxren Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unwytqqc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE