Static task
static1
Behavioral task
behavioral1
Sample
18df5cd91f110fe8a757294c9584aab0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18df5cd91f110fe8a757294c9584aab0.exe
Resource
win10v2004-20231215-en
General
-
Target
18df5cd91f110fe8a757294c9584aab0
-
Size
210KB
-
MD5
18df5cd91f110fe8a757294c9584aab0
-
SHA1
a55742031dc34f6fd7d1bd75e797ceb639151976
-
SHA256
86289924c71a01b7a77c42facd1f4e936f04a92f273a453e11e1bb0ff2034961
-
SHA512
70785f48a8ac9b75f10f97f369ae2fd49e28729edc46878d3e079a7b96dd87b529150008350c73a26f42c38f44ac11b2d1aa82f858f5b752d4e4d9625be117c8
-
SSDEEP
3072:fSE4UxWwn7cgRMFFrNm1k8xVWQa8bZIYcDNb/HMY/W0QLeF50uWhtchlXTS:fSEtRMFFcxna8bZ4p/N/WXeF+XY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18df5cd91f110fe8a757294c9584aab0
Files
-
18df5cd91f110fe8a757294c9584aab0.exe windows:4 windows x86 arch:x86
9d38fc7ab11f55ecfe29a74e126aaa91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
ExitProcess
ExitThread
GetCPInfo
GetCommandLineA
GetConsoleCP
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetPriorityClass
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
HeapAlloc
LoadLibraryA
MulDiv
QueryPerformanceCounter
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
msvcrt
wscanf
atof
fseek
sscanf
strlen
strncat
strncmp
strstr
wcscpy
strcat
user32
SetWindowLongA
SetClassLongA
ScrollWindowEx
KillTimer
GetWindowTextA
GetCapture
EndPaint
DrawIconEx
comctl32
ShowHideMenuCtl
MenuHelp
InitCommonControls
DrawStatusTextA
CreateToolbarEx
CreateStatusWindowA
CreatePropertySheetPageA
CreateMappedBitmap
Sections
.text Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ