Static task
static1
Behavioral task
behavioral1
Sample
e18bc5fbcb69350a9b2f8b7bb82f38b6.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e18bc5fbcb69350a9b2f8b7bb82f38b6.exe
Resource
win10v2004-20240226-en
General
-
Target
e18bc5fbcb69350a9b2f8b7bb82f38b6
-
Size
898KB
-
MD5
e18bc5fbcb69350a9b2f8b7bb82f38b6
-
SHA1
79359923efe3ede737ec7c9ea458bbe7e6a1792f
-
SHA256
e8517c5f16ed42d5024af11f5c256988ef480eb80049a7407bbaed502bcd7677
-
SHA512
9ff7cf03f29b6c5cacb6d2242d50c4731e3f4c189b9e22bd01dad2691d41a0dbfa4268a924e820ba2aac7c27cc9508e774165582fd399df285bbb3b7af2294f8
-
SSDEEP
12288:Ru0Mmp1J7XzIL/qe5fbHkH5Fn5SYOPKGUZJ2wpsZx+O0rRfMsNBaYhw7+4+noy:n5ELXEj5SQx2wpy+O0NMsCmww5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e18bc5fbcb69350a9b2f8b7bb82f38b6
Files
-
e18bc5fbcb69350a9b2f8b7bb82f38b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE