Static task
static1
Behavioral task
behavioral1
Sample
2b4cf6b7907df730c69b34f85e473d4c826c3bc8d423a79b5d7cf0b2a2414b95.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
2b4cf6b7907df730c69b34f85e473d4c826c3bc8d423a79b5d7cf0b2a2414b95.exe
Resource
win10v2004-20230703-en
General
-
Target
2b4cf6b7907df730c69b34f85e473d4c826c3bc8d423a79b5d7cf0b2a2414b95.exe
-
Size
725KB
-
MD5
a73facbd34703f5058796bc672e9d972
-
SHA1
297d65a64c67439689f6e7a17e9e1c95a4f836ac
-
SHA256
2b4cf6b7907df730c69b34f85e473d4c826c3bc8d423a79b5d7cf0b2a2414b95
-
SHA512
9952d58339efb0d625ad41381d0299fed839eeae25d12e08743d838862eb0e204d8bc44f5ee32c32b2f2e7289eb8ccbe784de07b985bf877e90a69c74078441f
-
SSDEEP
12288:A5+J/M+Jhewx/NscEQ+vgXK1HsaPRmJpqoy2O4VXPGPElByZOwBiPfURJzVk+7AJ:P/thewlqB6pSmfqMVxPGPElB6j03URna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b4cf6b7907df730c69b34f85e473d4c826c3bc8d423a79b5d7cf0b2a2414b95.exe
Files
-
2b4cf6b7907df730c69b34f85e473d4c826c3bc8d423a79b5d7cf0b2a2414b95.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ