Static task
static1
Behavioral task
behavioral1
Sample
2a0252fdb13cce78789fb03d8c4fe639.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a0252fdb13cce78789fb03d8c4fe639.exe
Resource
win10v2004-20231215-en
General
-
Target
2a0252fdb13cce78789fb03d8c4fe639
-
Size
79KB
-
MD5
2a0252fdb13cce78789fb03d8c4fe639
-
SHA1
fe4c3995327a0ce3373f47adba800da02cd94c1f
-
SHA256
04aac01ddba0a64e984a35888acab169cebb0bf1c2e0eaf9028d3274381e0a7e
-
SHA512
8368cdf10346c7304c86c275bd4850cb1c2442d4ad609d986a6581a8da53b83f6e52f3668653afbecb56c43cd4f9ed73b266cc33800f62cb0990434d50aa206c
-
SSDEEP
1536:YCB/kIpFFHXFXOauOESfabLU7w9Gp5seEuKW8KSTk+m6LS72I:YCB/k+NpuyfcLUQGp5xEuKsSALQ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a0252fdb13cce78789fb03d8c4fe639
Files
-
2a0252fdb13cce78789fb03d8c4fe639.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ