Static task
static1
Behavioral task
behavioral1
Sample
2a31137707bbf88b0566cc4bc311b359.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a31137707bbf88b0566cc4bc311b359.exe
Resource
win10v2004-20231215-en
General
-
Target
2a31137707bbf88b0566cc4bc311b359
-
Size
303KB
-
MD5
2a31137707bbf88b0566cc4bc311b359
-
SHA1
843bde69e4b1771d3aeb0f9070df5f06fba20457
-
SHA256
e5c4332ec69edbf260568a73064bda9111322bf32ca0b9943e392217224df855
-
SHA512
09dbdd4339162a4b9fcd68297a5b5eaed804bb845d0b54a1e0f723c161bd3a08f0d686e0a9dc6aed1e56340970e169c24f79e358ffca4e4df4a6002ea59f366b
-
SSDEEP
6144:/VV9sEoklGiW+ia3/FdWZ+a7DW79OghD2UHGuL0NMf4mvrX6:/VrsTLiWfY/9azgh2qBb6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a31137707bbf88b0566cc4bc311b359
Files
-
2a31137707bbf88b0566cc4bc311b359.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE