Static task
static1
Behavioral task
behavioral1
Sample
2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2.exe
Resource
win10-20230703-en
Behavioral task
behavioral3
Sample
2.exe
Resource
win10v2004-20230703-en
General
-
Target
2
-
Size
1.4MB
-
MD5
87d9e89daf6c452096889ef080a1dc70
-
SHA1
6e5413fe5c7d4ecaf813a40002f04fa83f7cb977
-
SHA256
15e976ecf3761cdb825998aa077ebca83df985eeee25b11e09adb9b837815035
-
SHA512
f0833ef2f7f28bcca2a58d38fa275ffc640747cba1256f20bd6de6dda5eb06a3f25bfae522916c2e0bfbce740cc4c24dc8dcbd1f068d30cab5b5ad4368ed5914
-
SSDEEP
24576:6v9aq99GdHbtsnvNzwnkzkNpcJomdKXe5BJHJgbgrxiRvffGCwMaA:g9a0G1tsnFUhJXIVJgOiwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2
Files
-
2.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 734KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE