Static task
static1
Behavioral task
behavioral1
Sample
c218ae4c579eede815713550aecac872.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c218ae4c579eede815713550aecac872.exe
Resource
win10v2004-20240226-en
General
-
Target
c218ae4c579eede815713550aecac872
-
Size
396KB
-
MD5
c218ae4c579eede815713550aecac872
-
SHA1
a0f4da0fd2a33991cff4851a42742f663a898e18
-
SHA256
625c244b84d59716a240d07935bc7874da425cc3be8affcb87b46061aecf4e6e
-
SHA512
b80b2613d7957e8d6cda0b78e38daf8f859a3c8c717740d7848318678421291ea58fda4ba173c9c8493b66219cf39217cb3775327644fceb249d3779f1f303bf
-
SSDEEP
6144:7cBbb7eduBydRKfXes3HP10y9RrLrsMV85uaImEQBlia:7cNTHes3v10yjrLra7IC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c218ae4c579eede815713550aecac872
Files
-
c218ae4c579eede815713550aecac872.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 389KB - Virtual size: 389KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ