Static task
static1
Behavioral task
behavioral1
Sample
2e7f55562de2dc2b0cbd8ec4ffe7547a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2e7f55562de2dc2b0cbd8ec4ffe7547a.exe
Resource
win10v2004-20231215-en
General
-
Target
2e7f55562de2dc2b0cbd8ec4ffe7547a
-
Size
3.1MB
-
MD5
2e7f55562de2dc2b0cbd8ec4ffe7547a
-
SHA1
68cb007730f6f5a3260785ce44b059eb18e3c827
-
SHA256
410e1923ded2006f0e51dbc3f09facd10ef6a9197cb2b4ef4c3064678fb04299
-
SHA512
832768bace272124a09f7bcf9e641d289aaeeedb4c4e58e32bdf0ffb759e0457b22e87c714e8d0ed7bad39cce78382d3fb68e2683262d58f350a082669e63fd0
-
SSDEEP
49152:5ajqeGME1pdLnSqvQ6+KLCabGthNOStlzmLQotN9ryCZsoFVJwbK5UMinXBgJ:QeeGMiLnSLHhASbzmkksbbXRgJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e7f55562de2dc2b0cbd8ec4ffe7547a
Files
-
2e7f55562de2dc2b0cbd8ec4ffe7547a.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ