Static task
static1
Behavioral task
behavioral1
Sample
18cf8c40b758ac63b9d790438c0dd26f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
18cf8c40b758ac63b9d790438c0dd26f.exe
Resource
win10v2004-20231215-en
General
-
Target
18cf8c40b758ac63b9d790438c0dd26f
-
Size
80KB
-
MD5
18cf8c40b758ac63b9d790438c0dd26f
-
SHA1
124890e65e440c5e21e2d2bc1ea867baebcda391
-
SHA256
044076227bd1cc983d2239f2797254ffe1bdc18b0624e11ae67a24b2329fa170
-
SHA512
5d5c0c41f3e0ac01b782b24537f7999e79a4f4a731a4a2146c7e38d1a9b34904da03694f50b65c55b68c7eb73281edf36b04fd5cdc44ad7a6ecca6336132c529
-
SSDEEP
768:T1Yf71Mg51bcgBH5T9Zztj7CzrWB2ScKurezSybn7vPrquxHTWQvuAlqdrx8HpOr:Bglmg5Tf9u82STSybnvquxzWgusqRI+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18cf8c40b758ac63b9d790438c0dd26f
Files
-
18cf8c40b758ac63b9d790438c0dd26f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2304.0MB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LEGION Size: 4KB - Virtual size: 4KB
.LEGION Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE