Static task
static1
Behavioral task
behavioral1
Sample
18c78c3747d07bd156a760ef92ae1a6d8dbcadd86b5577f7509274a302ebeab6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
18c78c3747d07bd156a760ef92ae1a6d8dbcadd86b5577f7509274a302ebeab6.exe
Resource
win10v2004-20230915-en
General
-
Target
18c78c3747d07bd156a760ef92ae1a6d8dbcadd86b5577f7509274a302ebeab6
-
Size
1.7MB
-
MD5
b86baf23aca18f50beca58a677aeb5ff
-
SHA1
61dd8d9b638d612c148cfa753c993acf7178a714
-
SHA256
18c78c3747d07bd156a760ef92ae1a6d8dbcadd86b5577f7509274a302ebeab6
-
SHA512
e99d28de390bcb1b94954589901010bb8f687cc08454c44877461099540d93c034f92a2f4a483d1f7874578c1aef9672f3b8b242845a44d6fedafe2e0158b902
-
SSDEEP
49152:Y7Y3wR2xs4r4VMm9dRzzFbju+Gb2PJsWT12u:K24ddRzgOJ2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18c78c3747d07bd156a760ef92ae1a6d8dbcadd86b5577f7509274a302ebeab6
Files
-
18c78c3747d07bd156a760ef92ae1a6d8dbcadd86b5577f7509274a302ebeab6.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE