Static task
static1
Behavioral task
behavioral1
Sample
c2de33952f28c3c8dffca9df505e6b0817e4ecdcb28357f1a6acfa6c572c2d16.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c2de33952f28c3c8dffca9df505e6b0817e4ecdcb28357f1a6acfa6c572c2d16.exe
Resource
win10v2004-20230915-en
General
-
Target
c2de33952f28c3c8dffca9df505e6b0817e4ecdcb28357f1a6acfa6c572c2d16
-
Size
3.0MB
-
MD5
baea31c4a9ef6762e07787f12d53bb94
-
SHA1
506040153931e550a1aec358406ed530564a0946
-
SHA256
c2de33952f28c3c8dffca9df505e6b0817e4ecdcb28357f1a6acfa6c572c2d16
-
SHA512
563678b1f311de0bbf188abe8a88acbeb90000dfe7e21653bfd279e270aafef4ae7a4bd74e91d7a3f19f7eef7d00021e0da47e57c841eddc1f4d50f2b1f6c6c1
-
SSDEEP
49152:lBd0aGWaHwq35VUgajuKIlnsF0+MKATK8v83HwAZ9EW+9pTqq3:lMWuwq37axOnsFPGKB4WYTF3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2de33952f28c3c8dffca9df505e6b0817e4ecdcb28357f1a6acfa6c572c2d16
Files
-
c2de33952f28c3c8dffca9df505e6b0817e4ecdcb28357f1a6acfa6c572c2d16.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 164KB - Virtual size: 164KB
IMAGE_SCN_MEM_READ