Static task
static1
Behavioral task
behavioral1
Sample
2f5033448789dca5bca9d9d7e591a662.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2f5033448789dca5bca9d9d7e591a662.exe
Resource
win10v2004-20231222-en
General
-
Target
2f5033448789dca5bca9d9d7e591a662
-
Size
336KB
-
MD5
2f5033448789dca5bca9d9d7e591a662
-
SHA1
ca3fa25005054f3439c1b9701ce3b222f6a712bc
-
SHA256
5a64f780e04abc0bd21004cd6625e1d024af2a743de0e6feda65f47321cf3b52
-
SHA512
b1b37cc7cb013b0da841ddfda568eb0babff4960dbf209548c259c3187656716ee55151a9d5a3742e390658b121225d6cd21938a6b89db5c9682720391561b35
-
SSDEEP
6144:VpfkmJ0OMZeSTLA6GNGxFIhAcEiS9VvvDc1B5CQPTYmusHCtrR2sD09C+A9B3p3:TkOIeSTU6GYo7ivnDc1JTYfsHCt9Z096
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f5033448789dca5bca9d9d7e591a662
Files
-
2f5033448789dca5bca9d9d7e591a662.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rol Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE