Static task
static1
Behavioral task
behavioral1
Sample
2c41bec9a49baef39630c058952c9c70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c41bec9a49baef39630c058952c9c70.exe
Resource
win10v2004-20231222-en
General
-
Target
2c41bec9a49baef39630c058952c9c70
-
Size
55KB
-
MD5
2c41bec9a49baef39630c058952c9c70
-
SHA1
94260ea80ee08758828ec62e461ac30c87fafbad
-
SHA256
cb52c0ce99c79a21cb33e92fe311b62df1022f1234697d9039f753e52b5f9f2b
-
SHA512
dcd42d23d8b6d3bcbafd2e08450276f83b85c731bd8f2dcc0d0e4907fb7c3ba2662ca72eebc692c8801a2edacce9a947a875de47eda7b0a3e8742e040bab82ed
-
SSDEEP
768:xevFI1m0on6HGavZUdQffoaFNnioNQpMGTXlFPVrqX9zm3yr53nm5GMuMQC3aTk:UtV6HGavhgaIfRK9zm30dnvfM1ag
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c41bec9a49baef39630c058952c9c70
Files
-
2c41bec9a49baef39630c058952c9c70.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ