Static task
static1
Behavioral task
behavioral1
Sample
2B799FE1A6624D0FD5282F56AE5DD2AA-cleaned.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2B799FE1A6624D0FD5282F56AE5DD2AA-cleaned.exe
Resource
win10v2004-20230220-en
General
-
Target
2B799FE1A6624D0FD5282F56AE5DD2AA-cleaned.exe
-
Size
485KB
-
MD5
896fa206a5538ded100f5c2230ce2060
-
SHA1
846daf4d2ef11bf0eae80a09cec812c7365fb08d
-
SHA256
2b04257a22028fa7303e7dcf666560ac661862b6e5974e693b9bd08b3644f866
-
SHA512
8b8a02ec48359f141fc769a7df7d30d7dbc1e810976c2e30d7f329ea9d1307c9f48ff90a10e84cce464f7376452102ede7bce5ed276c1dfbaf604a2f2fed18d0
-
SSDEEP
12288:Kv5IRqk1mrztSPWmicWuVOfoeKXmU0YiOKPZm:KRIRV1+tsWpTuofoa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2B799FE1A6624D0FD5282F56AE5DD2AA-cleaned.exe
Files
-
2B799FE1A6624D0FD5282F56AE5DD2AA-cleaned.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ