Static task
static1
Behavioral task
behavioral1
Sample
2e0c35708898d51a59869d9ac0c3a0460322c332d10e89c7a60a5a7cfe5b7e42.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2e0c35708898d51a59869d9ac0c3a0460322c332d10e89c7a60a5a7cfe5b7e42.exe
Resource
win10v2004-20230221-en
General
-
Target
2e0c35708898d51a59869d9ac0c3a0460322c332d10e89c7a60a5a7cfe5b7e42
-
Size
942KB
-
MD5
9cef320b83d1ea74b658ac493cca5712
-
SHA1
add52ba21c5e4ad7994a44b4ebb1fe1fe0af8dfc
-
SHA256
2e0c35708898d51a59869d9ac0c3a0460322c332d10e89c7a60a5a7cfe5b7e42
-
SHA512
28098043fa3bbc0545dbffcb9cfc2c28a30b794dece7a56848d509bed5d5f5cc5af89a2c9d105094e808fa747c2a42259753690599f196947d81410fd4285d9a
-
SSDEEP
12288:26ThPDFAc1L0vvXcd8LMNaN3lPJuGnFEUllzlA11:V+cmXXcdChltFj3e1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e0c35708898d51a59869d9ac0c3a0460322c332d10e89c7a60a5a7cfe5b7e42
Files
-
2e0c35708898d51a59869d9ac0c3a0460322c332d10e89c7a60a5a7cfe5b7e42.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 938KB - Virtual size: 937KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ