Static task
static1
Behavioral task
behavioral1
Sample
518af36a33eb7a959b7c0042fb7d6ecc5b1e8e3a8d30722bb0bced267f2ffc96.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
518af36a33eb7a959b7c0042fb7d6ecc5b1e8e3a8d30722bb0bced267f2ffc96.exe
Resource
win10v2004-20240226-en
General
-
Target
518af36a33eb7a959b7c0042fb7d6ecc5b1e8e3a8d30722bb0bced267f2ffc96
-
Size
75KB
-
MD5
2f239ee895c9d4b15a45de428c62f69b
-
SHA1
19c5b529b40da9a8440f059f08e779a2542894eb
-
SHA256
518af36a33eb7a959b7c0042fb7d6ecc5b1e8e3a8d30722bb0bced267f2ffc96
-
SHA512
d281fa5e8a09b7e91f3280c45ca8eb9ebebd330a929216d328dedab4ae0165e7187633051fc86be1bd3f30388ffcb5d2e5e64daafaf4f0535abd9d04b6321d34
-
SSDEEP
768:8SU69Kjkr2rUFTSCIdx6Ro56MzFNOfghqTFfnL3Nuc1s6qmO1NWczVsDQdnpUWUU:TP99XSIgcfzNPkbMcDBG2JxUudSOvN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 518af36a33eb7a959b7c0042fb7d6ecc5b1e8e3a8d30722bb0bced267f2ffc96
Files
-
518af36a33eb7a959b7c0042fb7d6ecc5b1e8e3a8d30722bb0bced267f2ffc96.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ