Static task
static1
Behavioral task
behavioral1
Sample
2eab4c413c64e4aefbf1271b79d887e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2eab4c413c64e4aefbf1271b79d887e9.exe
Resource
win10v2004-20231215-en
General
-
Target
2eab4c413c64e4aefbf1271b79d887e9
-
Size
831KB
-
MD5
2eab4c413c64e4aefbf1271b79d887e9
-
SHA1
070bfefe18f8c3ba4684b5b7d1eb46da98924e57
-
SHA256
aa2416bb0169f3ae11547f3c35e6f419c311da6eee31880a592006916f85ceb2
-
SHA512
d78d3a5d48873898394edc312d1a0986b22122b796e26e38b9df89c7ca236a71ac00e77407b9bc3de0f61dfc62a41437c1750e6df6ec8bdb8dd3531591a33eda
-
SSDEEP
24576:REzXvl41MUoPNP32ycEEJ+Yh8AZUtGTu/:RGN4esUi9hlGsu/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eab4c413c64e4aefbf1271b79d887e9
Files
-
2eab4c413c64e4aefbf1271b79d887e9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nfJBg86 Size: 512B - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nfJBg86 Size: 830KB - Virtual size: 847KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE