Static task
static1
Behavioral task
behavioral1
Sample
2bb6e6ce68aaed38059b27ef87699866.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2bb6e6ce68aaed38059b27ef87699866.exe
Resource
win10v2004-20231215-en
General
-
Target
2bb6e6ce68aaed38059b27ef87699866
-
Size
189KB
-
MD5
2bb6e6ce68aaed38059b27ef87699866
-
SHA1
b2c360cb66caabcc9cbd821b09cd2deefe6317ad
-
SHA256
e527cb0094b520a950901c343f05347519e4cdec5dde97b2cb8b0ad30a002d9b
-
SHA512
746714dee06e72d8d8c20478d2882bf1f2cca758a7fd635cd5976f3e688fd3ae9142355f479fbdb9d14ed081756296d43805bd07b1f82b2fae2bbb099dd360b0
-
SSDEEP
3072:kPb7/H5/XqWXvUtN2wA7JIGkSg38iH/bPbif7B7bbrMbvT0q8O1cZPzQ7IXMBc+d:kv/TXstSaGkSqbPbifdXwvP6bQ7yMP+Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb6e6ce68aaed38059b27ef87699866
Files
-
2bb6e6ce68aaed38059b27ef87699866.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 61KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE