Static task
static1
Behavioral task
behavioral1
Sample
2fe5622808e42615b5564c9aca7fa83f476c6eb86d0060d0465e85fc3d407345.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2fe5622808e42615b5564c9aca7fa83f476c6eb86d0060d0465e85fc3d407345.exe
Resource
win10v2004-20230220-en
General
-
Target
2fe5622808e42615b5564c9aca7fa83f476c6eb86d0060d0465e85fc3d407345
-
Size
4.4MB
-
MD5
e499fb814a917a758fd3175ebc109385
-
SHA1
2eeb6928469c832b9512f41da038c3bb1639cf84
-
SHA256
2fe5622808e42615b5564c9aca7fa83f476c6eb86d0060d0465e85fc3d407345
-
SHA512
7a67c4e65e0d2ec080bc432799062391185a67c9e2db502da77e3d27ee0293d55853c0f380baa5106abfa7959dc8396d444bf192b3170da8b96fd8ef3359f392
-
SSDEEP
98304:8z5aijEw35biV/byG917kZ1OA8EvCCp4i0:8z5aiww35q/byG9174HCCp30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fe5622808e42615b5564c9aca7fa83f476c6eb86d0060d0465e85fc3d407345
Files
-
2fe5622808e42615b5564c9aca7fa83f476c6eb86d0060d0465e85fc3d407345.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2.4MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 275KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 326KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 991KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE