Static task
static1
Behavioral task
behavioral1
Sample
2955ccde4cafac6ceb6856ff6bd8badc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2955ccde4cafac6ceb6856ff6bd8badc.exe
Resource
win10v2004-20231222-en
General
-
Target
2955ccde4cafac6ceb6856ff6bd8badc
-
Size
195KB
-
MD5
2955ccde4cafac6ceb6856ff6bd8badc
-
SHA1
c2e3797734d37fb5a37f95d753a2cfe3a48e61b2
-
SHA256
e06596bff13e54c6118ba1be6703422aa19f61c8c683593d73d1971a83064088
-
SHA512
139841741917e4eff20621fe3a909d932aecc2ecb72f01bd6ce80682e35c53a4ee78033a12bda310f7a963a5bd581dcaa849d774be72ded32f517be8252f1c14
-
SSDEEP
384:MVuBC2ZnlQ9Kaonycs2fzm4YXzGGtOe6mBdgQRCeDjw75bJaadZvsBOZ:MwBSKzycs2bPUq+dfCeM7Zvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2955ccde4cafac6ceb6856ff6bd8badc
Files
-
2955ccde4cafac6ceb6856ff6bd8badc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 194KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE