Static task
static1
Behavioral task
behavioral1
Sample
2d2a5172fbf96cec7ca8f3d8f3c1eb487649154f94865700df91fd7f72b24317.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2d2a5172fbf96cec7ca8f3d8f3c1eb487649154f94865700df91fd7f72b24317.exe
Resource
win10v2004-20230915-en
General
-
Target
2d2a5172fbf96cec7ca8f3d8f3c1eb487649154f94865700df91fd7f72b24317
-
Size
320KB
-
MD5
16cc7d1f999b91c1be4ecd0f62816dbc
-
SHA1
1b33fe8dbc1f3ca802f2c66692d42a67146f92b1
-
SHA256
2d2a5172fbf96cec7ca8f3d8f3c1eb487649154f94865700df91fd7f72b24317
-
SHA512
a22a2c9510e8af45af4729dd925311109a3dfb20c9d21a924b888c55e5c3828f71fef2c488fd5a8331b35f2a73a0cabd18bbc1a2d4bdec5747309a258287c46c
-
SSDEEP
6144:jz2ke1cQ47/C1Eug1qQsRPw+bT/9vgGC/7jv+BojyvAoyFOh7TpEm:jh6MxsRPw+bT/9vgGUtFOhF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d2a5172fbf96cec7ca8f3d8f3c1eb487649154f94865700df91fd7f72b24317
Files
-
2d2a5172fbf96cec7ca8f3d8f3c1eb487649154f94865700df91fd7f72b24317.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ