Static task
static1
Behavioral task
behavioral1
Sample
18798805a7a46420b786bc914d881863b6cc6c1ee62ba4131e9d4db1daaf5702.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
18798805a7a46420b786bc914d881863b6cc6c1ee62ba4131e9d4db1daaf5702.exe
Resource
win11-20240611-en
General
-
Target
18798805a7a46420b786bc914d881863b6cc6c1ee62ba4131e9d4db1daaf5702
-
Size
1.8MB
-
MD5
f0d6e0be31511adb2953af3d318aa96c
-
SHA1
72c4bf94474b662f5043a22cfdd474ed4a236338
-
SHA256
18798805a7a46420b786bc914d881863b6cc6c1ee62ba4131e9d4db1daaf5702
-
SHA512
282748542057cfd17b2c3ba515c48271a090f2067402538cf4e826a6605ef7c8a5a6a5a760a2b63238c8191ee899231d01512d3383d3a610d27e7fb7fc9dd065
-
SSDEEP
49152:63GU9MybWuIVLnp4UOxAqTnPxaxnN479wBy:5VL0H5axN4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18798805a7a46420b786bc914d881863b6cc6c1ee62ba4131e9d4db1daaf5702
Files
-
18798805a7a46420b786bc914d881863b6cc6c1ee62ba4131e9d4db1daaf5702.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lwjahche Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iaasdqik Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE