Static task
static1
Behavioral task
behavioral1
Sample
18736ca5e2b27e33fe24a99aac9ab2e5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18736ca5e2b27e33fe24a99aac9ab2e5.exe
Resource
win10v2004-20231215-en
General
-
Target
18736ca5e2b27e33fe24a99aac9ab2e5
-
Size
385KB
-
MD5
18736ca5e2b27e33fe24a99aac9ab2e5
-
SHA1
94258c06816c001cb1d2e1661aefd248e6451fad
-
SHA256
8edc3843929243d288bb8519e053975273de1fcc6023dbc0eb1907d2211bb665
-
SHA512
905a6eb62763d34a7d92fdc6d624fd1de8a57e81739ede8781fd429cc87cd9b514fa9489c8ade2c6ff9e4f41c4ac0985c5f8cc3d69a14c2e4359f4975b241c86
-
SSDEEP
6144:nUfGfe3cKCr6uubys21OWIplM8MKSCXsxjXWhBIDojCD3amg2nDVYbLOqOInB:Vq01VT8SCSjXWbeoY3amRnZYeqOoB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18736ca5e2b27e33fe24a99aac9ab2e5
Files
-
18736ca5e2b27e33fe24a99aac9ab2e5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ