Static task
static1
Behavioral task
behavioral1
Sample
2ef679350a4850921788fcb7a1062afe63a1df72f10792df41faf6affa80d0d4.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
2ef679350a4850921788fcb7a1062afe63a1df72f10792df41faf6affa80d0d4.exe
Resource
win10v2004-20231020-en
General
-
Target
2ef679350a4850921788fcb7a1062afe63a1df72f10792df41faf6affa80d0d4
-
Size
1.5MB
-
MD5
5d36a72d937c8e725a7f0580e4a6fe8c
-
SHA1
fabbffbe347b912305cc6955c46fc096304d97b0
-
SHA256
2ef679350a4850921788fcb7a1062afe63a1df72f10792df41faf6affa80d0d4
-
SHA512
6324818cbbb9a866af432ec167e296663452a6ef44d39460234558295afaa296b703f8d008cc8a49348cf88a8c6af06d467ad90874995ab4a8c5c47287d66d8a
-
SSDEEP
49152:HyJ5W+3tzEfsRSbJtbCor2nLfQlyCAI0Ts:Sa2LRSbreor+OT0Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef679350a4850921788fcb7a1062afe63a1df72f10792df41faf6affa80d0d4
Files
-
2ef679350a4850921788fcb7a1062afe63a1df72f10792df41faf6affa80d0d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE