Static task
static1
Behavioral task
behavioral1
Sample
518e5fd121b959213f61bb4850311605.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
518e5fd121b959213f61bb4850311605.exe
Resource
win10v2004-20231215-en
General
-
Target
518e5fd121b959213f61bb4850311605
-
Size
385KB
-
MD5
518e5fd121b959213f61bb4850311605
-
SHA1
45eaa812ed3537d149ae8e3d9c613f84279b9b91
-
SHA256
b3383e5a20d0ca3ca6b83a1a9577e1229f04a4515eae6501abbc096377987411
-
SHA512
1ea0f992933d4198dc21fe2da5d1cd117eea5b4832cdb7d5fc4d79512e952b60f6d4c96da19e020d0841f9e9be760b4943330c54531d50483aa2613bab9ccf1b
-
SSDEEP
6144:Vor6dbv2bIXINHTgeZgBszB470QNEbVjITgqoIzFw6eAjAMb4lXB:Vw6dL2bw0HTgeZg4+70QNUq6iFFeGaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 518e5fd121b959213f61bb4850311605
Files
-
518e5fd121b959213f61bb4850311605.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ