Static task
static1
Behavioral task
behavioral1
Sample
2de24d2f4eff2a218eeb30d14d699643.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2de24d2f4eff2a218eeb30d14d699643.exe
Resource
win10v2004-20231215-en
General
-
Target
2de24d2f4eff2a218eeb30d14d699643
-
Size
17KB
-
MD5
2de24d2f4eff2a218eeb30d14d699643
-
SHA1
589253fd63260a513e5dd7638a80963f0856617d
-
SHA256
c6eeeac14267199e3cb9fb310461aefe22393a16c9e88ddee26db6a1abd70b71
-
SHA512
6354272d9c17f2ddbe5872f1ddf21c5ae92fa2cea744739d47e653cd45439c142b28c1f27c7364e7df0ca43cd33d254a61691ba3becb35cce684efaaaff0f9ff
-
SSDEEP
384:BOqJ6eksHQfmBYIKCZ8d06f+UaVQLLYOjFju8:BrJ6eksI8ZZ8d0M+UaVaYOJh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de24d2f4eff2a218eeb30d14d699643
Files
-
2de24d2f4eff2a218eeb30d14d699643.exe windows:1 windows x86 arch:x86
350cafda2b8d177b37be408fc128bb02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strstr
_setjmp
_CIsinh
?name@type_info@@QBEPBDXZ
_Getdays
kernel32
FreeLibrary
GetTapeStatus
GetThreadContext
GetThreadTimes
GetPrivateProfileIntA
GetProcAddress
Sections
.text Size: 7KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE