Static task
static1
Behavioral task
behavioral1
Sample
2a42e8a97e5b718997b3cc09b84001e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a42e8a97e5b718997b3cc09b84001e0.exe
Resource
win10v2004-20231222-en
General
-
Target
2a42e8a97e5b718997b3cc09b84001e0
-
Size
293KB
-
MD5
2a42e8a97e5b718997b3cc09b84001e0
-
SHA1
bacc593e3c0d75b4c81af6db13e86e25913e6e05
-
SHA256
883c826d07e54a958a2ff07a1389a3d7fa298bc6436ea5de929ec01732267ead
-
SHA512
216aba917a11e1281c4c29460d6ffa5ca4284519debed89ee3e5acbe1b0b8cf4f7fe5dd525e5473727591fc881b470d297330e1ff0fccbaab9065d999f6d0203
-
SSDEEP
3072:/RYEo5rIQQ1+LojrEY3G/xYguOn+x+I+vWHlMYczDEA/whhT:U5rIQ4jgY3GJYgumnI96zDw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a42e8a97e5b718997b3cc09b84001e0
Files
-
2a42e8a97e5b718997b3cc09b84001e0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE