Static task
static1
Behavioral task
behavioral1
Sample
0218c5db0c463f5f9a094d43e3458999.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0218c5db0c463f5f9a094d43e3458999.exe
Resource
win10v2004-20231215-en
General
-
Target
0218c5db0c463f5f9a094d43e3458999
-
Size
2.5MB
-
MD5
0218c5db0c463f5f9a094d43e3458999
-
SHA1
45cb36f99c14e8578892ff746a2dee109fcd4b3e
-
SHA256
e28b306fe594cb3ac01b477453f1469dfeb5934a945d4bac8696fb1186e7a15f
-
SHA512
97da89728f47371d78b01e08a5dee04cfb0092fa1ea3565d5bca6b471412ea6b0f4f0f15feceaa4ad2d0a6b89e1f7a9a13ca7845dcf36200af716a4922cf076a
-
SSDEEP
49152:wx3bFmJSfj1EvwlIrqr7CUfTOK8kyeBjsSa5Km6:wlbIofjNKrzUKv+m5w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0218c5db0c463f5f9a094d43e3458999
Files
-
0218c5db0c463f5f9a094d43e3458999.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
U%t5e8v` Size: 509KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ttC1Sg?/ Size: 840KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ym7f2h+0 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
";5f-_'Y Size: 512B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
]hF`m@v" Size: 954KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R8ld"WYZ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE