Static task
static1
Behavioral task
behavioral1
Sample
2e5cf6f7c9cf878f54590247deadf879.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2e5cf6f7c9cf878f54590247deadf879.exe
Resource
win10v2004-20231215-en
General
-
Target
2e5cf6f7c9cf878f54590247deadf879
-
Size
700KB
-
MD5
2e5cf6f7c9cf878f54590247deadf879
-
SHA1
3c21eae7061c09fdd5048a5196db0ae422ea7e45
-
SHA256
f879b547d2f1aace754350b472b1b45d139c49643ab41304944f78155548b98a
-
SHA512
a7381a66f51bc938a81e8892a15864b5e8a000044b6b5cbe4c37f81ed76fc61fecb4f87ae948c1b20bef61559f5d8d0fedacce41e617e2f62127c72afc4b1b0f
-
SSDEEP
12288:OTvr/GrQ/AJLiiHRy1tRhnuoh4CcU0CRAeEiuR411kVHptnRxw1cpy6rVhbsPWxm:OLy8suiHRTK440VWW61oxwGyUHQP2m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e5cf6f7c9cf878f54590247deadf879
Files
-
2e5cf6f7c9cf878f54590247deadf879.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 623KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE