Static task
static1
Behavioral task
behavioral1
Sample
2cf65e97a5b6361fcd5c193c8ee621e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cf65e97a5b6361fcd5c193c8ee621e0.exe
Resource
win10v2004-20231215-en
General
-
Target
2cf65e97a5b6361fcd5c193c8ee621e0
-
Size
25KB
-
MD5
2cf65e97a5b6361fcd5c193c8ee621e0
-
SHA1
3e657eb3b0c8f800df733e41236306ef9c088379
-
SHA256
98c8f55452eccae425aef016742702385838b78e02b56699afff2bc7efc6d83d
-
SHA512
d7e0e77265d3d2d19185b62f8bcef074178c25719f69eedbfb0faf2d529b0f38f6483c98887132bbab93d2e86e53f5d3692d571e827edf17df39e42824b2df1a
-
SSDEEP
384:RGfrwbMnvtQCO99Napj02CHKPA4XKX2+h:RGfrwbMnvmd99Nat02CHKImKX2S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf65e97a5b6361fcd5c193c8ee621e0
Files
-
2cf65e97a5b6361fcd5c193c8ee621e0.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE