Static task
static1
Behavioral task
behavioral1
Sample
2511b8ef52415eff96f1ca65b1a67cfe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2511b8ef52415eff96f1ca65b1a67cfe.exe
Resource
win10v2004-20231215-en
General
-
Target
2511b8ef52415eff96f1ca65b1a67cfe
-
Size
20KB
-
MD5
2511b8ef52415eff96f1ca65b1a67cfe
-
SHA1
a18b41bcf7cbf8d044aba9f56bb1125d344bb8d3
-
SHA256
09b865a5d7c88523be276931109dc843b7f4bcc6b490f1f28faee44b8c733c17
-
SHA512
1892dc3c4204fed9d466e0f7e570b3b3e1998aaba11eed1ae8018c15ff7bb832bd08b3cabc62cb945b8a81c0816aeb7daba9a329e03282a0f6958cb2ffa166c7
-
SSDEEP
384:dVCM9PoLVCs+K06uhV2brf+JrIiBnxfy5FMJSnzvgxse:dfoLkK0hV2Pf010+Wza
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2511b8ef52415eff96f1ca65b1a67cfe
Files
-
2511b8ef52415eff96f1ca65b1a67cfe.exe windows:4 windows x86 arch:x86
3b1dfa80a780ea8fc4aa7094c1ab1db6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
Sections
�@ Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE