Static task
static1
Behavioral task
behavioral1
Sample
18aa855ba79c9d14cc312ffefaa50240N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
18aa855ba79c9d14cc312ffefaa50240N.exe
Resource
win10v2004-20240709-en
General
-
Target
18aa855ba79c9d14cc312ffefaa50240N.exe
-
Size
419KB
-
MD5
18aa855ba79c9d14cc312ffefaa50240
-
SHA1
318556d332997b81a43ea379f4f9f9eb167e86e5
-
SHA256
a812d2a8c7a4b5940a9b2c1b12548fd21e49db5dd3cb583196f11a80bb15f961
-
SHA512
d2a51ecf520bd568e0f6939af0116dbdb667d3b3d389cd16b612eae55cace4d362ad7cabc4fb2d58b6fddb3e7f98be57ebd84cfe8482b2319d32e5ed8dba71ef
-
SSDEEP
12288:dXCNi9B8eX7sPvmFATHlWP//gjAuy1wMF3VILH04:oW8eXMvmoWP//j1nuj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18aa855ba79c9d14cc312ffefaa50240N.exe
Files
-
18aa855ba79c9d14cc312ffefaa50240N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE