Static task
static1
Behavioral task
behavioral1
Sample
2543.exe
Resource
win7-20231215-en
General
-
Target
7e1efbd98ede52ff9aa0d926d0e1aea0
-
Size
256KB
-
MD5
7e1efbd98ede52ff9aa0d926d0e1aea0
-
SHA1
914bfbd5791a789bd4119aca60fc01409592a5c2
-
SHA256
22b62de39f22cd914a7a362076ebb2c419d98cab7f3485591a9301c8670e43fa
-
SHA512
936be0842a52ead1551cabeb668e49b92088b5d1ea7bc5882ac019f46cfa245d48a1be0427a34c918121957a69b17bfb34a5af425f4255a73ee43f67e389de5a
-
SSDEEP
6144:NALZLPd/TZ0iakk94rLE8gN/7YCpI1Gwo2b5kIqTVOa1WmanF:MbGOkKrF6TpI15FdkPVOLmaF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2543.exe
Files
-
7e1efbd98ede52ff9aa0d926d0e1aea0.rar
-
2543.exe.exe windows:4 windows x86 arch:x86
cfef8918eb06fe9cd292b786655a4658
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
URLDownloadToFileA
Sections
CODE Size: 251KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE