Static task
static1
Behavioral task
behavioral1
Sample
2b9f59173c43deb881378771843187c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b9f59173c43deb881378771843187c4.exe
Resource
win10v2004-20231215-en
General
-
Target
2b9f59173c43deb881378771843187c4
-
Size
87KB
-
MD5
2b9f59173c43deb881378771843187c4
-
SHA1
638551ea454d0a8eccc5b6a115654178dbd078fb
-
SHA256
a0cf9d7c313f5fb9baed6eab2de56fff947fbfcc3c23b922ab2fd26bbc57e739
-
SHA512
71260252be83e06daeb07d1186a3eb993f7f8e5bed040079550b06b5cd1ec77865bbcb1f51688c67a8eb6626ea8ccf884216d41568d2855f7e97865e0eb3eafa
-
SSDEEP
1536:L2KqXf8DPQahRQTlEMEb9iGYeyebLkl0H1HFzfOHJlWvZYt3L0uf6:L1sf8DphRQoTTPkM9FfQJlHZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b9f59173c43deb881378771843187c4
Files
-
2b9f59173c43deb881378771843187c4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 221KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ