Static task
static1
Behavioral task
behavioral1
Sample
2b4d812c29082d42bf78467fa09f4e42.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2b4d812c29082d42bf78467fa09f4e42.exe
Resource
win10v2004-20230703-en
General
-
Target
2b4d812c29082d42bf78467fa09f4e42.exe
-
Size
1.4MB
-
MD5
2b4d812c29082d42bf78467fa09f4e42
-
SHA1
b378410152b7562097e196d18e88abef4b95d95b
-
SHA256
43deb83f3cfe3efa5c3f293ebe23ab68a08b3136a098fb7302882fad99564926
-
SHA512
464210dc7300fa86cbe4fa149e250b3af08bd7a39fc7da41a4edbf61ac6068ccd939dbfd6282c4b9bc05f1ef360f7a8dfa0bd8087614cb638b48857b060d3004
-
SSDEEP
24576:3Rr2/GkPR9FfOnLYgvU7CHQmASnqNmhRYsCHvj+hqLpRCF4sKhTXprzG:3cPN6LYgvUeHQmRYsCr+YVw2Lp/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b4d812c29082d42bf78467fa09f4e42.exe
Files
-
2b4d812c29082d42bf78467fa09f4e42.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 346KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
%hfbd Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE