Static task
static1
Behavioral task
behavioral1
Sample
a18abdbe3d5cf0e27720fde212ccbceb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a18abdbe3d5cf0e27720fde212ccbceb.exe
Resource
win10v2004-20240221-en
General
-
Target
a18abdbe3d5cf0e27720fde212ccbceb
-
Size
19KB
-
MD5
a18abdbe3d5cf0e27720fde212ccbceb
-
SHA1
9196b4a2baf213c0492c0eadd5b3d2697dd98560
-
SHA256
609283dd1861f4eba1982cfa0f1e9db8665524e158eb0741bc84318934422c37
-
SHA512
a29a93664fbab81830e6e903f2876df67c79987e4c6e72b1a0d912f69e9c799bff346588cac6c2a89fcd024dc6bab7424522f8c0662153219e6a6dcf4f7a9da6
-
SSDEEP
384:HGzec4ZXXE5YvRh76E4j+7g7xj+EshP4as0FFbWfrK9ZOmjm:mzecUZVgj2g7xBshP4asApWsOma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a18abdbe3d5cf0e27720fde212ccbceb
Files
-
a18abdbe3d5cf0e27720fde212ccbceb.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ