Static task
static1
Behavioral task
behavioral1
Sample
d918b4e14500a44dbb915dbd272b6cf3db43d05d1c4626f7e4e4e58c53f208b7.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
d918b4e14500a44dbb915dbd272b6cf3db43d05d1c4626f7e4e4e58c53f208b7.exe
Resource
win10v2004-20240508-en
General
-
Target
d918b4e14500a44dbb915dbd272b6cf3db43d05d1c4626f7e4e4e58c53f208b7
-
Size
85KB
-
MD5
f4b9156806d54207ae0040b5861eed5b
-
SHA1
f4f0706169d6f721a5e2251a37126db0cc3ed526
-
SHA256
d918b4e14500a44dbb915dbd272b6cf3db43d05d1c4626f7e4e4e58c53f208b7
-
SHA512
11b3154d33307f0bce19b97b0079eb7810b44a548fd6ed2f1121e58617ff3d8841741f75ec165ea2da809f06fa6dc768b2bc178511dff0069c344b46f1b11e65
-
SSDEEP
1536:BUg+vFt17WyuXWcz5gNURFzNRdhj2VM62LHiMQ262AjCsQ2PCZZrqOlNfVSLUK+:BUlRWrGclRFLjzHiMQH2qC7ZQOlzSLUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d918b4e14500a44dbb915dbd272b6cf3db43d05d1c4626f7e4e4e58c53f208b7
Files
-
d918b4e14500a44dbb915dbd272b6cf3db43d05d1c4626f7e4e4e58c53f208b7.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.00cfg Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ