Static task
static1
Behavioral task
behavioral1
Sample
2a1c8695d7703239075c31c5d11879ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a1c8695d7703239075c31c5d11879ff.exe
Resource
win10v2004-20231215-en
General
-
Target
2a1c8695d7703239075c31c5d11879ff
-
Size
104KB
-
MD5
2a1c8695d7703239075c31c5d11879ff
-
SHA1
b4edc3d354a5c69c08167b03564cb5b1808b9a32
-
SHA256
6816da565b8918e8de83a1dc865e1409729d6fce3c4b89f791cd9ae13b05b2c1
-
SHA512
687a01c08356cb0d7e3fd79ec22c942114a099b14ffffd3ac013bfbe786d788a0b983f0bbe8ed58d630d9dea5fc32229420af2c7b5d06f71dcd41c03b55e89d8
-
SSDEEP
768:+S4fvcBXgFRwg69+LRkpIU+MEzrFDp6RV032Q/Tv+uWVrKDuCDTIuQg3vXGX8dUT:DBg7zHBp6RKz+utDDsUpUeMiEuw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a1c8695d7703239075c31c5d11879ff
Files
-
2a1c8695d7703239075c31c5d11879ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE