Static task
static1
Behavioral task
behavioral1
Sample
2ef2aca7ded7336dc29f50d86119144118339fce619a3122c72fcb22bb652b45.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2ef2aca7ded7336dc29f50d86119144118339fce619a3122c72fcb22bb652b45.exe
Resource
win10v2004-20230915-en
General
-
Target
2ef2aca7ded7336dc29f50d86119144118339fce619a3122c72fcb22bb652b45
-
Size
3.1MB
-
MD5
2828696b2c10357728c87f30f24fd392
-
SHA1
7fe8ef1853188abcef5897bdb8aea4fdc0b5afed
-
SHA256
2ef2aca7ded7336dc29f50d86119144118339fce619a3122c72fcb22bb652b45
-
SHA512
ddc90eed5ff5501221d9aa7316ee93b2a8762354e74157ae71a422329ef8002c1189c8fc03ef0cdabc93fe4f038dae0e2cf0e2b26099d509ab5aae784ccbdfb7
-
SSDEEP
98304:P0vLSPEq+cMcbc1TOW4ZprOSMCcfl4NWKan:CLScF1TOppLcdi4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef2aca7ded7336dc29f50d86119144118339fce619a3122c72fcb22bb652b45
Files
-
2ef2aca7ded7336dc29f50d86119144118339fce619a3122c72fcb22bb652b45.exe windows:0 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 528KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.4MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE