Static task
static1
Behavioral task
behavioral1
Sample
2f833c24773c05e81f7af558a516573a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2f833c24773c05e81f7af558a516573a.exe
Resource
win10v2004-20231215-en
General
-
Target
2f833c24773c05e81f7af558a516573a
-
Size
382KB
-
MD5
2f833c24773c05e81f7af558a516573a
-
SHA1
c5186d6ec10c6bc3706cc1885df3e869f4d063c8
-
SHA256
7dfccf3a79742f7ffcd45629efe3ffa88461d44aaf1570a6d02a84a5a1c38516
-
SHA512
706fd2ffcf92494d7ccfe7ae05bf6a25b75090ba1f9125e5f7aaf6f4bc0f1d6a5beba287cac96a36ae3e71a7ffb619f9405ec56f13cd0e2e5dd6716cc7353a84
-
SSDEEP
6144:u7uD08lAuBFMA92nfNYoAuBFMA92nfNYCGoSbLhYp2gEHaUOGG6ARx:+OvlAuBFMAefNhAuBFMAefNlSbLhm2rE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f833c24773c05e81f7af558a516573a
Files
-
2f833c24773c05e81f7af558a516573a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 344KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ