Static task
static1
Behavioral task
behavioral1
Sample
18c8f4a30a96907cae4add66c7edd74d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18c8f4a30a96907cae4add66c7edd74d.exe
Resource
win10v2004-20231201-en
General
-
Target
18c8f4a30a96907cae4add66c7edd74d
-
Size
1.5MB
-
MD5
18c8f4a30a96907cae4add66c7edd74d
-
SHA1
f940674c2572ea8627e5d938efac334661914868
-
SHA256
02cf02b315dc73cd05ac2c8f01dbc880137d52ddfb4eeebdb8b950a3f58e071d
-
SHA512
084f08bf5c102440bc9815a3ea6ee395e1423233b5061a27cecd215d9ee9c7c1dab2a1fd8817e0cac47dd2414047a5d0b06807ed57bf10acbe909addd3063ecc
-
SSDEEP
24576:e9dG37Vk0R07Qanm9pnk5xFHXnKc2K35AbCPaGPFtysKVtpVrN15:lrq0R07QQmbernKcJJAM/PisMtpVp15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18c8f4a30a96907cae4add66c7edd74d
Files
-
18c8f4a30a96907cae4add66c7edd74d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 484KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ