Static task
static1
Behavioral task
behavioral1
Sample
2221bd93a53603472e4390d41075f6eca7dd4193aa2b6d655a949be1b7b06daa.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2221bd93a53603472e4390d41075f6eca7dd4193aa2b6d655a949be1b7b06daa.exe
Resource
win10v2004-20230915-en
General
-
Target
2221bd93a53603472e4390d41075f6eca7dd4193aa2b6d655a949be1b7b06daa
-
Size
2.4MB
-
MD5
8d137041fb928b85535a9903c453fb26
-
SHA1
099391b2468b8134ffbac2aca54a0378bea5a66a
-
SHA256
2221bd93a53603472e4390d41075f6eca7dd4193aa2b6d655a949be1b7b06daa
-
SHA512
693a4a9bff2c8c36199063854dd28a3bc949292cac8376a60c87a09367698970471f24c7929ca1e70f140d2a60ed8bd5379ddff86aecbb42bfc0bd2efb9f30ed
-
SSDEEP
49152:GvdIxdyycYsdV+ZSaeBDi18S3ypDP6+G8YmGoFmGoIQ:oIxrcYsdVU8c3inYGLQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2221bd93a53603472e4390d41075f6eca7dd4193aa2b6d655a949be1b7b06daa
Files
-
2221bd93a53603472e4390d41075f6eca7dd4193aa2b6d655a949be1b7b06daa.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 776KB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 300KB - Virtual size: 304KB
IMAGE_SCN_MEM_READ