Static task
static1
Behavioral task
behavioral1
Sample
2b8c466f185b8c8504c42b857ec614c7.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2b8c466f185b8c8504c42b857ec614c7.exe
Resource
win10v2004-20231201-en
General
-
Target
2b8c466f185b8c8504c42b857ec614c7
-
Size
60KB
-
MD5
2b8c466f185b8c8504c42b857ec614c7
-
SHA1
60bfefd3a419dcd07d88836b07ad3d964c910795
-
SHA256
851a0a82b18c57e42616d755fce250a7c9a9d7365ca83dd1bc7b9af6c92420e6
-
SHA512
036c7b0d0c2a8c36a3a3dbbf035d9c078d3b1cd045246a315eb350c93c086ba8ce9c682eba496629aa979cfd981745ed0d6409aa9434db2ca3149722d6058613
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPI:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd9X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b8c466f185b8c8504c42b857ec614c7
Files
-
2b8c466f185b8c8504c42b857ec614c7.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
HSUDHUHW Size: - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSUDHUHW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE