Static task
static1
Behavioral task
behavioral1
Sample
2a2c381b8562f2d1d79e550315c6cf82.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a2c381b8562f2d1d79e550315c6cf82.exe
Resource
win10v2004-20231222-en
General
-
Target
2a2c381b8562f2d1d79e550315c6cf82
-
Size
670KB
-
MD5
2a2c381b8562f2d1d79e550315c6cf82
-
SHA1
75183b3d44fc176aff2691e53cea0c3af1d0cc59
-
SHA256
7b999aabb13100095689260cd52a32b04a7c748242233f481be8f1ca503605b6
-
SHA512
1d7ca4210be6d95ce62fee795f862be26ecc4469ec2ad8b4e644b80a1661235dadbc0d95101d6f9bba0e9ae890bf01c6701e49326557a9e45b3ce25367b5f8df
-
SSDEEP
12288:cwebzuPHa6au0hFywXuXIRE9Ab5Jo1bK7JljCyt+lHeucmFquCcd7OH:cwezSHa1bXWq81CJljCyRCPdC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a2c381b8562f2d1d79e550315c6cf82
Files
-
2a2c381b8562f2d1d79e550315c6cf82.exe windows:4 windows x86 arch:x86
0dfa28acf6845608382b3189782224af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetProcAddress
Sections
.text Size: 24KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE