Static task
static1
Behavioral task
behavioral1
Sample
2b0f21fde1f8c1f93b16a301ba1fbe51.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b0f21fde1f8c1f93b16a301ba1fbe51.exe
Resource
win10v2004-20231215-en
General
-
Target
2b0f21fde1f8c1f93b16a301ba1fbe51
-
Size
47KB
-
MD5
2b0f21fde1f8c1f93b16a301ba1fbe51
-
SHA1
82b63fe92ae94c7203ddfe24a895062efe7d0dae
-
SHA256
cb61f11c97931defc29f9aab40f462e956a0cb11562d7e2fbe77144a3a897203
-
SHA512
e74dfed46d530b8fa341196a71d2d3629ad7f850d31ad20e28e598e0811161a724e6cd36f41718069b5e525db7c147f8a9d9088c01d76e95303a9ea33a5f9e68
-
SSDEEP
768:FSrsWE0ZOpiM0zHGgKDlg2PpJIlQTMK1UHNVEHNN7KSy11b:sOpucS2P0HNVEHNNTG1b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0f21fde1f8c1f93b16a301ba1fbe51
Files
-
2b0f21fde1f8c1f93b16a301ba1fbe51.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 4KB - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ