Static task
static1
Behavioral task
behavioral1
Sample
2c5d30250dc04425e50fa99d7b7c3dd2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c5d30250dc04425e50fa99d7b7c3dd2.exe
Resource
win10v2004-20231215-en
General
-
Target
2c5d30250dc04425e50fa99d7b7c3dd2
-
Size
170KB
-
MD5
2c5d30250dc04425e50fa99d7b7c3dd2
-
SHA1
d40a62778c330746e6e2222e5b7b8d96c8f48dc4
-
SHA256
1e347b0b6329e4d6a5a18da21c6659e4f3263473bcca5b90552451f2006f4b22
-
SHA512
e33133c82b25c9b1d6b3dfb3027ccd425cfe0d79ac0186440714377d6630565539762ea2e4d5e717195e4988e84e0641ad86bc91c52e2f53323e06aad818ea24
-
SSDEEP
3072:oTEDiSGQaqigpSRIUyeINLajLGri6C59ADH2TvX:DWS8kaIf2GGZADHEf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c5d30250dc04425e50fa99d7b7c3dd2
Files
-
2c5d30250dc04425e50fa99d7b7c3dd2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ