Static task
static1
Behavioral task
behavioral1
Sample
18d4f157384e2cc94fa11212128b6149.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18d4f157384e2cc94fa11212128b6149.exe
Resource
win10v2004-20231215-en
General
-
Target
18d4f157384e2cc94fa11212128b6149
-
Size
44KB
-
MD5
18d4f157384e2cc94fa11212128b6149
-
SHA1
a5e3ff4d9e40b2319499f69a9128bd256e5d3641
-
SHA256
391b70cc2fb76ba9a8775d4c958e141de11267ed24cf638c767f8ddc87b8c045
-
SHA512
b803192cde79c0257f5ba39219b0496ac5a4145ee76270c41e3e6275e58285dbea3a7357ddd46929c0c35a32ef277571b328a94da4b96b073223fbce934612af
-
SSDEEP
768:xdybqx2R3RxamSRLj6VPnJkwsUCZ4SFTP0IR/7dK6uSq2Q2nrlz:xdyex83SRKPuws708pMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18d4f157384e2cc94fa11212128b6149
Files
-
18d4f157384e2cc94fa11212128b6149.exe windows:5 windows x86 arch:x86
e18a7d307fd991a58376f9a42f7bb540
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageW
GetIconInfo
Sections
.cdwpqf Size: 36KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bmh Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.graz Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ