Static task
static1
Behavioral task
behavioral1
Sample
18e0d5a8cffe695d5961ecde3fd53e91.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18e0d5a8cffe695d5961ecde3fd53e91.exe
Resource
win10v2004-20231222-en
General
-
Target
18e0d5a8cffe695d5961ecde3fd53e91
-
Size
74KB
-
MD5
18e0d5a8cffe695d5961ecde3fd53e91
-
SHA1
316e1018e862e5bbcc0e1bd9c895cb852f9df006
-
SHA256
7c8092b869dd2fa4cddbd90a8f7af2d87ec403a0af2b80a55581f3f541e7a149
-
SHA512
3e153401a62c1f8a763c1c4d930418c8cf01617a7a944aed534434e5fd5501dc9b236fa37259dfa9b277604822054fa01349fad2cf983628b63be45ea1389fe2
-
SSDEEP
1536:5gnvGJ8OixQdYlLCaMcWCTxa8dcIodHL0m5/Ew:iQKa9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18e0d5a8cffe695d5961ecde3fd53e91
Files
-
18e0d5a8cffe695d5961ecde3fd53e91.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ