Static task
static1
Behavioral task
behavioral1
Sample
18acece568289214700ed7e639049a6d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18acece568289214700ed7e639049a6d.exe
Resource
win10v2004-20231215-en
General
-
Target
18acece568289214700ed7e639049a6d
-
Size
132KB
-
MD5
18acece568289214700ed7e639049a6d
-
SHA1
889fdce076a6fb816148147706c13901a418c274
-
SHA256
100848c70db3515519fa9cb42363c7fe43bae1412ca2a826a90ec89dbb3d0e7f
-
SHA512
43931798e1f60cc0f15719ea9530fbcfdfa93e6bc85be29d0cfd9c995393286f25e00bd19b90f29cc081558bd6fb58e385fbaaced2f9ad85395041a748b721ff
-
SSDEEP
3072:0TczrfrH13VtEbYFEPkKAAclf0a5+hmaj:0gPzV3V3F0DA3lV+Ya
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18acece568289214700ed7e639049a6d
Files
-
18acece568289214700ed7e639049a6d.exe windows:4 windows x86 arch:x86
fceb65334e0658425977d8d31bc0097f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCommState
SetProcessAffinityMask
OpenMutexA
GetCurrentConsoleFont
lstrcpyA
IsValidLocale
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
PESEC0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PESEC1 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ