Static task
static1
Behavioral task
behavioral1
Sample
18ede86f6d3de13ec534a11626fa92d0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18ede86f6d3de13ec534a11626fa92d0.exe
Resource
win10v2004-20231215-en
General
-
Target
18ede86f6d3de13ec534a11626fa92d0
-
Size
2.0MB
-
MD5
18ede86f6d3de13ec534a11626fa92d0
-
SHA1
06b6ea5da354e044088d4437046b9c50355a8c3f
-
SHA256
539a98169fcd57fa1992cc776331395fd219d51bfce8e067a7c4a782615d8f5a
-
SHA512
ee1edd20cf944a9d9e40b9ad0547129cebfc47c39f1aab6c8e6f69478e8d330eeffb7c3333da457773338aed29b0f13aaa8d6907bcce2dae44b25f0120f7c276
-
SSDEEP
49152:SCsIooRDf8gjMI5ghApa/Zj1SD7F+UchjnPZdpSxmmF6G/km:SCRtf3l5ghApOjqchjnIsmFCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18ede86f6d3de13ec534a11626fa92d0
Files
-
18ede86f6d3de13ec534a11626fa92d0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 188KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XXX Size: 1.8MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE