Static task
static1
Behavioral task
behavioral1
Sample
2a7000f313af6ae515bf87c4d65763c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a7000f313af6ae515bf87c4d65763c3.exe
Resource
win10v2004-20231215-en
General
-
Target
2a7000f313af6ae515bf87c4d65763c3
-
Size
38KB
-
MD5
2a7000f313af6ae515bf87c4d65763c3
-
SHA1
64b82c6cd62f50e277a4e83e8c412751f15232dc
-
SHA256
c261082f70b6a18c69b9c610e0361c1473f8367a69995205b1d28b486d03aaf5
-
SHA512
ce95529b2ff3d2a9c58fd1778fc334534a213c7c2331d1a32f099a7920bc59232df13e6d81b284802e4925a4026a280d262012781a711c5b7cbd809ebed7aa0b
-
SSDEEP
768:4aiyupuVfaUtYUH55gp74yw+KTvBUTD0ed212iPeCxcYNoyD:OyB5aUtjHUp74v7TZe0edgHPeCxcXyD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a7000f313af6ae515bf87c4d65763c3
Files
-
2a7000f313af6ae515bf87c4d65763c3.exe windows:4 windows x86 arch:x86
97c1770361601ced061f0fcd8b2d5982
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW
shell32
StrRStrIW
SHAppBarMessage
kernel32
ExitProcess
TerminateProcess
Sections
.text Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE