Static task
static1
Behavioral task
behavioral1
Sample
2905f828e6bc4eab942de379f17fc913.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2905f828e6bc4eab942de379f17fc913.exe
Resource
win10v2004-20231222-en
General
-
Target
2905f828e6bc4eab942de379f17fc913
-
Size
105KB
-
MD5
2905f828e6bc4eab942de379f17fc913
-
SHA1
9b9063f91468da1263edfe2611261f321816204a
-
SHA256
467bfc65451f4247018994702fb75a87c47ab12c72cc338dbe5ab3127bc3b71c
-
SHA512
552b2d5ffdd718ba8f6eb228968ce77ec3a32342a57a7f8931acd1ccd9bd3c43f5bc17bd995bae39d207392d33122d6d1cfdfc37ee7ec54a020c61037356bfc6
-
SSDEEP
768:8FoKc76qPzXHdQPiGvsOV11IAfROg2xZOh2/uxzACu/wKs5UUd:8OfGqbW3sZur2x8vp6TMUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2905f828e6bc4eab942de379f17fc913
Files
-
2905f828e6bc4eab942de379f17fc913.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE