Static task
static1
Behavioral task
behavioral1
Sample
2808f1650d78f55dba9a312ab7172cb3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2808f1650d78f55dba9a312ab7172cb3.exe
Resource
win10v2004-20231215-en
General
-
Target
2808f1650d78f55dba9a312ab7172cb3
-
Size
944KB
-
MD5
2808f1650d78f55dba9a312ab7172cb3
-
SHA1
3927e03fd50e61a35530366086f78fcfc9bd1b00
-
SHA256
9049285c909f97f6342cd619ec5292e73c1cef65706904d7665743358fd6eb1f
-
SHA512
e53016167d83c6df04bd3bca79d4166a5a23831897867edc62732c5c81ce9c48a2dc89910feee7f9a3a141233242b4d1a7b8019b9eb8df85b7ddcc64444b2b2d
-
SSDEEP
24576:ad305G1hCeOPMdt/+itlGPNurOxNvugyY3:gk4wMdtC177vuc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2808f1650d78f55dba9a312ab7172cb3
Files
-
2808f1650d78f55dba9a312ab7172cb3.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 782KB - Virtual size: 781KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ