Static task
static1
Behavioral task
behavioral1
Sample
2101c9639e9019678bf4e753a25ff92e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2101c9639e9019678bf4e753a25ff92e.exe
Resource
win10v2004-20231215-en
General
-
Target
2101c9639e9019678bf4e753a25ff92e
-
Size
90KB
-
MD5
2101c9639e9019678bf4e753a25ff92e
-
SHA1
fa8eec83cebf793079c993ab7936a951b761542d
-
SHA256
b820b102060b081a7095aa28f2193e85d3107c67a9f4524136c2800c0b03b62e
-
SHA512
6f5748997ead8c21d4327843d92b7f7c08f3836043e9af5f551610a49d3ae9a077db6548d5fabb56e0db9668c530de5c1ff9c9350ab1209614f7a51acba3a5ed
-
SSDEEP
1536:mtV+ZpNK8iYOU3f1G7OzjsQvHrAI7kEJJmIcm4vT4zVjt4k5+A/nbwmGTe6fEAey:mtV+JKZsMesQvHJJ0IK0zxuk5+a4Ldey
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2101c9639e9019678bf4e753a25ff92e
Files
-
2101c9639e9019678bf4e753a25ff92e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bad0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ