Static task
static1
Behavioral task
behavioral1
Sample
26918f823a764a8b53e0f7761983ff758df8aa219dde8a5c99cdbfa8125259cf.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26918f823a764a8b53e0f7761983ff758df8aa219dde8a5c99cdbfa8125259cf.exe
Resource
win10v2004-20240611-en
General
-
Target
26918f823a764a8b53e0f7761983ff758df8aa219dde8a5c99cdbfa8125259cf
-
Size
2.9MB
-
MD5
c618b8ee5c8f31bee4a9fe8446759d57
-
SHA1
2d988ccd97091f91301e7963801e29c06dba384a
-
SHA256
26918f823a764a8b53e0f7761983ff758df8aa219dde8a5c99cdbfa8125259cf
-
SHA512
86867fe7863c5686aa9ed191c1c5ebdf0bcd0709f40be3cd7ae98be4d5ded409d5e9c924a88ca026bade8fc3f3d335ad463b578652762dbfb41c5a008999b8e5
-
SSDEEP
49152:z50bUUf6I8ABEcSgWROlLh0xvUuqTlr+gmgocXbHRgcF3dtaSCrL:+bUUf6ITW0EOlGxqpr+derHD3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26918f823a764a8b53e0f7761983ff758df8aa219dde8a5c99cdbfa8125259cf
Files
-
26918f823a764a8b53e0f7761983ff758df8aa219dde8a5c99cdbfa8125259cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.3MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ