Static task
static1
Behavioral task
behavioral1
Sample
2f0f94276a096a6039135c7e8e2ec00d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2f0f94276a096a6039135c7e8e2ec00d.exe
Resource
win10v2004-20231215-en
General
-
Target
2f0f94276a096a6039135c7e8e2ec00d
-
Size
97KB
-
MD5
2f0f94276a096a6039135c7e8e2ec00d
-
SHA1
fe0cb2a435e4b9fbf3f8727b404727aab6128dce
-
SHA256
73e341166460a724658c0cf5b88fecf6195133d3e37eaa6f2cd7f591f8a413bb
-
SHA512
c427a96ae4dfa3013228d581f9dfd29b28fd99fec5800b16a86396f973c184394718a7da04305cc7bfd712e05c26aa7a4c18082d4e11faca6c8d55f71ddec568
-
SSDEEP
1536:1ctDFPQAIt9CbE46OhnWc3Y79uvfHvA4zQrlvEEbTybO4do4hlX8ob7s9MX99R9O:1/9CZ6OxWcIQfA7ZV+So3pRg9W9Nlg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0f94276a096a6039135c7e8e2ec00d
Files
-
2f0f94276a096a6039135c7e8e2ec00d.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 65KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teraphy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE