Static task
static1
Behavioral task
behavioral1
Sample
18c2959b6b0eae231ed56a0d333caa6d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18c2959b6b0eae231ed56a0d333caa6d.exe
Resource
win10v2004-20231215-en
General
-
Target
18c2959b6b0eae231ed56a0d333caa6d
-
Size
1.5MB
-
MD5
18c2959b6b0eae231ed56a0d333caa6d
-
SHA1
14569f0762eefb84ad00a57b9fc3f9cba927cb65
-
SHA256
29f38ad1138230ff191cc3043af2b7fe57cba67b8baaade8762f7e2a91bc7c31
-
SHA512
43faf69ed9e7daf40c38bece383bfb3f028296e7cdbacb3a537d0ceadc433f245cc7b8576c46485b7bb147709539769425d766851679bec3353f5c95368a93bc
-
SSDEEP
24576:skhON9mQoICXswVTqjM9hHrjJIy2v2tKT4/QMgvpaP16+KxnqfD7tRjkzttnRPSU:ra9mQoIZGTSaXIPvwKs/rWk1mnqflRjd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18c2959b6b0eae231ed56a0d333caa6d
Files
-
18c2959b6b0eae231ed56a0d333caa6d.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 668KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ndroarwq Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hvzbbmvi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE