Static task
static1
Behavioral task
behavioral1
Sample
2f89e5dd072d9d641e35bc954e3fb591.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2f89e5dd072d9d641e35bc954e3fb591.exe
Resource
win10v2004-20231215-en
General
-
Target
2f89e5dd072d9d641e35bc954e3fb591
-
Size
47KB
-
MD5
2f89e5dd072d9d641e35bc954e3fb591
-
SHA1
aa9dd6b55e5c8c7bd66f193f6c9177e89a7eec6b
-
SHA256
e2ff4c8a3752157686b8ee3d28edf96e9dfbce8e6d32a17e4d22b3f5483e84ad
-
SHA512
1ade683136a63589a0de45058054759ea3043ff67a3ede2dabb64da1bad24321d887401d72b45f691bfd0a692f61d8de0550ab0e9a6057fee62e9511130bb9c7
-
SSDEEP
768:HorAybd1JzFo7zRHmc5aQMjK8vFm0kUFUfGA/XgWfR3LvwyBzZOoD1p/oie4Q6Fa:HHybd1JOxHR59MjK8vFmEswWFFdOoD1o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f89e5dd072d9d641e35bc954e3fb591
Files
-
2f89e5dd072d9d641e35bc954e3fb591.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ