Static task
static1
Behavioral task
behavioral1
Sample
0c18d82d30c57f4eb7b9ce8f7bb367b114718b077b7fd7bd838f57399c5921d0.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0c18d82d30c57f4eb7b9ce8f7bb367b114718b077b7fd7bd838f57399c5921d0.exe
Resource
win10v2004-20240226-en
General
-
Target
0c18d82d30c57f4eb7b9ce8f7bb367b114718b077b7fd7bd838f57399c5921d0.exe
-
Size
817KB
-
MD5
102be22cf6400173c8ae309c08f33c0d
-
SHA1
64d8c9e92688c3e1193bac9a240f770e69fcd266
-
SHA256
0c18d82d30c57f4eb7b9ce8f7bb367b114718b077b7fd7bd838f57399c5921d0
-
SHA512
10ecf468598e8805a5942d3be9ef70be44bdf1c5e1d241b32afc1d5ff14cc312d11d1bc38f93269269a9a511d1565deb59b8746176468eb11938c0622bd09688
-
SSDEEP
12288:sCsL9MhHwgG3KYH1iylXB/1PYQ9nQ+hCzvYf3DcU/y4jb/oSb8rQppAIQe0OT:Lo/1iylXB/RpVhCzvY3gDrkmA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c18d82d30c57f4eb7b9ce8f7bb367b114718b077b7fd7bd838f57399c5921d0.exe
Files
-
0c18d82d30c57f4eb7b9ce8f7bb367b114718b077b7fd7bd838f57399c5921d0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 800KB - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ