Static task
static1
Behavioral task
behavioral1
Sample
2863fd28e153fb00520a6d85fdaa8dd8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2863fd28e153fb00520a6d85fdaa8dd8.exe
Resource
win10v2004-20231215-en
General
-
Target
2863fd28e153fb00520a6d85fdaa8dd8
-
Size
30KB
-
MD5
2863fd28e153fb00520a6d85fdaa8dd8
-
SHA1
856741041949453cd59e33b66863d264eb88b974
-
SHA256
d7e3c0b1166a2486966eaccc5ed9258309ee80cf352786a86707cf334b00e70a
-
SHA512
ac3344c83ac0e082961a6c3bbe4c1f3c35f66b51a3c27cd57fe400e11f8646ceb994a3c8a47e18b139c06e27bf87aec8c91b161f6dfe89cdde990c5bd2802b9d
-
SSDEEP
768:EMJ0MIG5+LE7415oYjXJaec/bDPy4eXW/O:3n+4E1AfPmXoO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2863fd28e153fb00520a6d85fdaa8dd8
Files
-
2863fd28e153fb00520a6d85fdaa8dd8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ