Static task
static1
Behavioral task
behavioral1
Sample
d18c5ee5de48ce63f76b8ba70e6eac771f0cc4cb27123ea5bd5825f074d6d26d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d18c5ee5de48ce63f76b8ba70e6eac771f0cc4cb27123ea5bd5825f074d6d26d.exe
Resource
win10v2004-20230221-en
General
-
Target
d18c5ee5de48ce63f76b8ba70e6eac771f0cc4cb27123ea5bd5825f074d6d26d
-
Size
2.0MB
-
MD5
d1a39b93cec22b2255db5cfdd115e54c
-
SHA1
ac8a0fd6cb9fc207ad698bc2ee742b1cc38ac9f5
-
SHA256
d18c5ee5de48ce63f76b8ba70e6eac771f0cc4cb27123ea5bd5825f074d6d26d
-
SHA512
d800ea6f58b1eeb2f5ea961ecf5eb10fcbf05fa8c13d47adb4d75457598351c8235bb06289f8d142c2ccf4a1a0aaa77bffcf7636ce031b9dec990d203ca7de95
-
SSDEEP
24576:0BZ/ve+BiBDQW4UdmQzv6qjPQycHe2sTZZpJBWF3RtWEpEreWlUi21nEm:0BZne+Blq7QycHkZISprlCE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d18c5ee5de48ce63f76b8ba70e6eac771f0cc4cb27123ea5bd5825f074d6d26d
Files
-
d18c5ee5de48ce63f76b8ba70e6eac771f0cc4cb27123ea5bd5825f074d6d26d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 824KB - Virtual size: 821KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 940KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ