Static task
static1
Behavioral task
behavioral1
Sample
2a229ccc391d5b8cf5331f2709cd83ec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a229ccc391d5b8cf5331f2709cd83ec.exe
Resource
win10v2004-20231215-en
General
-
Target
2a229ccc391d5b8cf5331f2709cd83ec
-
Size
1.6MB
-
MD5
2a229ccc391d5b8cf5331f2709cd83ec
-
SHA1
553241dc3b6557cda1204e7731db7ec53693cffd
-
SHA256
1747835a8d9b73e30dfdc58ed9d8cff1fa8454ab4f99f990115018f11c0a235c
-
SHA512
c389880dac7494ed514d6f04ed38569645d5c6d553698509666156274a0be5bc83ad14fc7a6ce1b44b967b2bd57bf47eb68ddd829040dca9955912687ed6ba02
-
SSDEEP
24576:6uIXn52qgwqg+NWigFVzxU4U2Wzj46WXO5XdBRp7HTu3yVszf93xgCQdnKV3fN/m:Ang6AcP8+fCIVGPwBoct7oMzi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a229ccc391d5b8cf5331f2709cd83ec
Files
-
2a229ccc391d5b8cf5331f2709cd83ec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
services Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE