Static task
static1
Behavioral task
behavioral1
Sample
2b94a0b6a68f3447d06d8da034aa5f24.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b94a0b6a68f3447d06d8da034aa5f24.exe
Resource
win10v2004-20231215-en
General
-
Target
2b94a0b6a68f3447d06d8da034aa5f24
-
Size
336KB
-
MD5
2b94a0b6a68f3447d06d8da034aa5f24
-
SHA1
fc231c9875b2ce519db6dee8593c1704355954e1
-
SHA256
7de1ddc7d915a387d772f0cea87cdfb0a16076ac925d45df2fbd66dd5ec894d6
-
SHA512
d3fa8c43ac7414289ac9801cebc86a0293f5039fa08f71afa0455265f89a4a701726e820a2f00f3a8d4b88cab4ff2892a1a1f20500ca00db2203be6768114e83
-
SSDEEP
6144:XPSGg9xReC9eY4nDWgRAkPvGQn8xID0DMFhL5TPBKEa0OoWOQ:/Q9xRQpR3PvGLxe0DMw9oZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b94a0b6a68f3447d06d8da034aa5f24
Files
-
2b94a0b6a68f3447d06d8da034aa5f24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
FPp5SdEG Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ChW8avWh Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
OZNFY7Rg Size: 301KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IHJ3KUI5 Size: 295B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0ICFj14c Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ