Static task
static1
Behavioral task
behavioral1
Sample
18dc2b297ae2cd596c8689a7e8b2f070N.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18dc2b297ae2cd596c8689a7e8b2f070N.exe
Resource
win10v2004-20240704-en
General
-
Target
18dc2b297ae2cd596c8689a7e8b2f070N.exe
-
Size
52KB
-
MD5
18dc2b297ae2cd596c8689a7e8b2f070
-
SHA1
f32b4527beed6ba0e0ffd00335bd2017313119ae
-
SHA256
71b8532c5f77dca26f8abb2066ec3cf59d03d9b788df11288f9192c6c367b075
-
SHA512
b1ab466e43dd6b76f766c69efa38d67b2ca637fbcf66e6ca564693568029f1f1119d17ac9f8c48bb6199b0285fd6b84ebcb9f22c46b2efc1df4568fa85f2c04b
-
SSDEEP
768:+RYE5YvpyxuJo+cBGbobGcLeZFqt1AQUKGYKnwV/1H5F/sC8MABvKWe:+z5YvpyQJowb1cS7jKNKwPWMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18dc2b297ae2cd596c8689a7e8b2f070N.exe
Files
-
18dc2b297ae2cd596c8689a7e8b2f070N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ