Static task
static1
Behavioral task
behavioral1
Sample
2cd4adba6ee47d2da41f99a1ba74015f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cd4adba6ee47d2da41f99a1ba74015f.exe
Resource
win10v2004-20231215-en
General
-
Target
2cd4adba6ee47d2da41f99a1ba74015f
-
Size
28KB
-
MD5
2cd4adba6ee47d2da41f99a1ba74015f
-
SHA1
816b011a4e614aa852e6df257f98b567db158b79
-
SHA256
97c6b31b7d93157a8f94d00953d28a401d6da6db5d81063060af532bcca7e18c
-
SHA512
f8b296c578ef22ce8e5353a63aa05476b54b19c4b491c843b8635e20207385f5bafc046750850bcba4b0b255b6a2e6e1a296786f4e0244624b6e795339def064
-
SSDEEP
768:aUnydH8dT8zRaxjbKubu+l0Ft3umaLTD3:aNHY8zMxKC0b3uhTD3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd4adba6ee47d2da41f99a1ba74015f
Files
-
2cd4adba6ee47d2da41f99a1ba74015f.exe windows:4 windows x86 arch:x86
c1292a21f548be44d6bc3948a305f83e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
LocalReAlloc
GetThreadLocale
BindIoCompletionCallback
SetLastConsoleEventActive
GetDevicePowerState
CreateWaitableTimerA
GlobalMemoryStatus
WaitCommEvent
GetConsoleHardwareState
_lcreat
GetConsoleAliasA
lstrcpy
GetProcessTimes
lstrlenA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ