Static task
static1
Behavioral task
behavioral1
Sample
2b0c632de0a5289ad505a6f4120e9b3f89c9a7a95d4e4d9b497d287a7e43ecf5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2b0c632de0a5289ad505a6f4120e9b3f89c9a7a95d4e4d9b497d287a7e43ecf5.exe
Resource
win10v2004-20230915-en
General
-
Target
2b0c632de0a5289ad505a6f4120e9b3f89c9a7a95d4e4d9b497d287a7e43ecf5
-
Size
176KB
-
MD5
9cd2b8a5582bcbe98fe88a079c9cc961
-
SHA1
b2b0208d276955f4dfabf5eb3d6a20fafe54e0b5
-
SHA256
2b0c632de0a5289ad505a6f4120e9b3f89c9a7a95d4e4d9b497d287a7e43ecf5
-
SHA512
bc1fbef4c69422be328870da10312f683fdd955c738f2f87f072f87959c2f1fa5b2cf63f7b7f02ceb62bd0cc4aedf7ed21396495b1f544914193afa8a51a8767
-
SSDEEP
1536:mjMqxL2Q3qOLj5MtVlyEeRupqYYQe4XQxy/VpfgLdQAQfcfymNG:4AyL9W0ElYKXeMrftffjmNG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0c632de0a5289ad505a6f4120e9b3f89c9a7a95d4e4d9b497d287a7e43ecf5
Files
-
2b0c632de0a5289ad505a6f4120e9b3f89c9a7a95d4e4d9b497d287a7e43ecf5.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE