Static task
static1
Behavioral task
behavioral1
Sample
180dc2a85d4957fd3dfb48171c602532.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
180dc2a85d4957fd3dfb48171c602532.exe
Resource
win10v2004-20231215-en
General
-
Target
180dc2a85d4957fd3dfb48171c602532
-
Size
606KB
-
MD5
180dc2a85d4957fd3dfb48171c602532
-
SHA1
52cb9f9c80809158eaf582aee46829c33a686789
-
SHA256
05b508274c646552e2c809be31ebd7f9f7cf8fc8c1eb528a61e89571267705d8
-
SHA512
08a5baae64da0d355ee0becc7afb1afaabc538200ff21a54a547059572fa0cad71548e5679d1c1035a35c8346a0550728342540fc5b22784bf665b68c92d715e
-
SSDEEP
12288:03Td+8rYHEBm8xD+1MuVK00NZkBkAmWL3Lutd0t3lqXJFdu08QI+5DUP+pYwfoqR:+3rYcm+z0OZk+lXde30/eG5DUeoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 180dc2a85d4957fd3dfb48171c602532
Files
-
180dc2a85d4957fd3dfb48171c602532.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vc++ Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 302KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE