Static task
static1
Behavioral task
behavioral1
Sample
18aab6bd6edf488b52939c676683a08f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18aab6bd6edf488b52939c676683a08f.exe
Resource
win10v2004-20231215-en
General
-
Target
18aab6bd6edf488b52939c676683a08f
-
Size
35KB
-
MD5
18aab6bd6edf488b52939c676683a08f
-
SHA1
befc51bb852cbbec2d09739678cab135a6b0d0b6
-
SHA256
3a19798939c9577a51be3142273f5e2730b12d5a0ab15af74ef6e9537853c800
-
SHA512
ec639c7d8a95e0e97556acb62e19e9a08489d5d19d86b818ab5950fa39b474a0638e0aa1e02443dfa9ffe8b81d17d2bcdd58551294fda100aec84dcb0216d87b
-
SSDEEP
384:pQKxzGConR5NkBEabXx5EgJgLa0MapjzbTJ0QomOhA1z0s7j5gQVgpRUo3sajE:ltjW5Nk1LbgLa1oXl0Ju0dVI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18aab6bd6edf488b52939c676683a08f
Files
-
18aab6bd6edf488b52939c676683a08f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 512B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdgdjg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdgdjg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aukifg Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE