Static task
static1
Behavioral task
behavioral1
Sample
2b5bd7dd68fc23b7d9b669c7944a690a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b5bd7dd68fc23b7d9b669c7944a690a.exe
Resource
win10v2004-20231215-en
General
-
Target
2b5bd7dd68fc23b7d9b669c7944a690a
-
Size
104KB
-
MD5
2b5bd7dd68fc23b7d9b669c7944a690a
-
SHA1
4bdb3d10fc0ff8334e1a69dc32ae1085d7ba573b
-
SHA256
44f4f0f184b260710900c44443f897d92081924cdc7ae0d8aed8411a22471066
-
SHA512
c1bd90e7ba139d35972842943f535ec76e2164e83d5ea1e6230dec89d80f96d67d3718234d1888fc838ed55f087e0496ac2bf6488dbcb4aad9c055bc9f8442e2
-
SSDEEP
1536:9V9lghKVAAtWq1869aJMFCm9teOutsIsYAlMdkXbAEMbZtFUDmpcUzvukSVUyMXa:vAe186leoV7MdkXbAEMJnpc2u5VZN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b5bd7dd68fc23b7d9b669c7944a690a
Files
-
2b5bd7dd68fc23b7d9b669c7944a690a.exe windows:4 windows x86 arch:x86
4e5e06d7d8785394177b08d72256777a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsSystemResumeAutomatic
CancelWaitableTimer
VirtualQuery
WriteConsoleA
LockFile
UnregisterConsoleIME
FindNextChangeNotification
FindNextVolumeA
SetMessageWaitingIndicator
CloseConsoleHandle
UTRegister
LockFileEx
SetConsoleIcon
GetCommandLineA
ExitProcess
GetStartupInfoA
EnumDateFormatsExA
GetCommState
CreateJobObjectA
CreateTapePartition
RegisterWaitForSingleObjectEx
Sections
ATSEC0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ATSEC1 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ATSEC2 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ