Static task
static1
Behavioral task
behavioral1
Sample
cs2P.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cs2P.exe
Resource
win10v2004-20230915-en
General
-
Target
cs2P.exe
-
Size
6.7MB
-
MD5
7c14e1e160f16e5f9f79e69bdf29b043
-
SHA1
48893fdab7bbbf23d5c8e932e2a9ba5c7b8abd3f
-
SHA256
14a2b0e0bc898c894de615b75aea609871f1e0f95f9b6e57317f2c36b67898d0
-
SHA512
3435e7f98ca769224c815b404dd94e479c8d209b00789f3a1cef88683bfdf05f28f106c7b0c191243d41a5cc88910f54b1f3efa6929d4aee76b723007e0b8f35
-
SSDEEP
49152:mikEoTCOs9MAgq9DdIzWvBbO7C+qFdhT+IAMjTDHT3+J3qvUq:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cs2P.exe
Files
-
cs2P.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ