Static task
static1
Behavioral task
behavioral1
Sample
2bb771440fd452fb70c2c5d6d6ba6f2e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2bb771440fd452fb70c2c5d6d6ba6f2e.exe
Resource
win10v2004-20231222-en
General
-
Target
2bb771440fd452fb70c2c5d6d6ba6f2e
-
Size
60KB
-
MD5
2bb771440fd452fb70c2c5d6d6ba6f2e
-
SHA1
f6205b23c8e89dbe45e7278c5c1100b4e2db89fa
-
SHA256
fee6ea2f816b6bf1f6c8f0ebd4559ed0aa1def4f4ff32e0e0b0cb57a59cbf90d
-
SHA512
2b7ef00be7023dd596e9e89ebb65bb84d92b498f9dc75ac666ea546f320fa501bc87f22c4961e99b655cb9e3964e4a6784c31332bfc327f9fc04c16ae50bf630
-
SSDEEP
768:1nm/Ba3+9dxDNTt0GxdXbbfzoEvDGGwj45FIId8QtHkDba1NWPr0hY6pqL9:1m/B62h7dXbQoTXII2h0UYhY6wZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb771440fd452fb70c2c5d6d6ba6f2e
Files
-
2bb771440fd452fb70c2c5d6d6ba6f2e.exe windows:4 windows x86 arch:x86
cd76ab5b8f0c0ad32a37b43d5fd38208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleInputExeNameW
SetConsoleIcon
SetSystemTime
SetFileApisToOEM
SetEndOfFile
LocalFree
GetSystemDirectoryA
CreateSemaphoreA
GetCurrentDirectoryA
Process32First
ExitVDM
GetFileAttributesW
GetConsoleInputExeNameW
GetConsoleInputExeNameW
SetThreadIdealProcessor
user32
SetWindowTextA
RealGetWindowClassA
IsDialogMessageA
UnregisterDeviceNotification
IMPQueryIMEW
InSendMessageEx
SetWindowLongA
CreatePopupMenu
CharToOemA
EqualRect
OpenInputDesktop
shell32
ExtractIconA
Control_RunDLLA
StrRChrIW
StrChrA
Sections
.code Size: 9KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack32 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ