Static task
static1
Behavioral task
behavioral1
Sample
2eb5aab474f1c62ca7e65ab650a6efdc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2eb5aab474f1c62ca7e65ab650a6efdc.exe
Resource
win10v2004-20231215-en
General
-
Target
2eb5aab474f1c62ca7e65ab650a6efdc
-
Size
44KB
-
MD5
2eb5aab474f1c62ca7e65ab650a6efdc
-
SHA1
33314d4e2343f25f18c5bc0747286f13117a48a2
-
SHA256
e83715c001317b79f0ec8d218cdaadd2d5889e5f54b4034e9619a61bf42d0e16
-
SHA512
c81a17988be3642e850891ba356a72aeded6187bd69a5a19735efcfb2bf0a274cf7fea6d005d64cab4b03dead5b933a7b994d2bb50e3776499c90d7e9ccf53b5
-
SSDEEP
768:jTpNLald13NAIWlDKt1G37VrVBUEQVkwbeTWsWUUbK9u3GpoztE:/p4zAIW5K/GL5VB5QaOe6sFpCt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb5aab474f1c62ca7e65ab650a6efdc
Files
-
2eb5aab474f1c62ca7e65ab650a6efdc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
ALKI Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SUCKS Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE