Static task
static1
Behavioral task
behavioral1
Sample
18f79aa069d1aab3e26a3734586c1248.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
18f79aa069d1aab3e26a3734586c1248.exe
Resource
win10v2004-20231215-en
General
-
Target
18f79aa069d1aab3e26a3734586c1248
-
Size
47KB
-
MD5
18f79aa069d1aab3e26a3734586c1248
-
SHA1
61baaa629a3dd260b6510109b4f57c3fabeb553f
-
SHA256
e70c66b68cc86a532cfbd662b1795cae9646df345bf1f98e0a9232d7ff5c0339
-
SHA512
78593d55327822216365e40841e279c19186be70971899c2b6ef928d1747ba81d455b5fd94f1971fc6ef598fd73f59bd2af9e3985aa84712fd67b7a3b34b9bd9
-
SSDEEP
6:idq+Vg3F+X32hemqi5CbadZQld/8msuWqETKUMhT7fc7y7/s9Wgs8dn:eFGSGhen2bwd/8msuWbKUSIUUbs0n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18f79aa069d1aab3e26a3734586c1248
Files
-
18f79aa069d1aab3e26a3734586c1248.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 11B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ