Static task
static1
Behavioral task
behavioral1
Sample
2993a66798b22bbcbf9750f697e095da.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2993a66798b22bbcbf9750f697e095da.exe
Resource
win10v2004-20231215-en
General
-
Target
2993a66798b22bbcbf9750f697e095da
-
Size
297KB
-
MD5
2993a66798b22bbcbf9750f697e095da
-
SHA1
3291f119a812e268e78ceab7b371ba13c4db2e22
-
SHA256
79f71d943550e54cca14a261dbbb60ce5e2ed15042e81b05fcdd2c2b8f1670bf
-
SHA512
cb545ab86a67acf91f91de32b4c8b45b3e1740dcf34ba9b6ff8396a0a02a29fd6119fb7237f48863f626516d1523de607943e22a7672159d85f219db0327bc95
-
SSDEEP
6144:uPmnbEwTL5WPmoUloLpnNHJeZHs/PIuHAAMW0d0h3:uuFWniGHJeZH4PRth
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2993a66798b22bbcbf9750f697e095da
Files
-
2993a66798b22bbcbf9750f697e095da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 296KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE