Static task
static1
Behavioral task
behavioral1
Sample
2f2d69bc54358fb0c6611077c6534870.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2f2d69bc54358fb0c6611077c6534870.exe
Resource
win10v2004-20231215-en
General
-
Target
2f2d69bc54358fb0c6611077c6534870
-
Size
236KB
-
MD5
2f2d69bc54358fb0c6611077c6534870
-
SHA1
102a700d18b505a66a10f33b5a7e1be8971cc84e
-
SHA256
dd0cba1a5a3069de91888caa6a5b4758586e2564a4fdd5a6204395f1e83c4964
-
SHA512
bbf21880ac84ab611bb5c4aecfaa4a74fc766c02b660f441762ca05876a038ddd129dad90b0efd2faff5a653a49a5ff812bbd2400c091ccc78d78113443fc313
-
SSDEEP
3072:pa4w+NxjCYvw+sg79GcL2Vzc2UA+rVAL7TjJ8M/onFyCG9nYbdVSAy/QZl4UGRLJ:eepHN3DqpMFJG9YbXTHAdxu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f2d69bc54358fb0c6611077c6534870
Files
-
2f2d69bc54358fb0c6611077c6534870.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ