Static task
static1
Behavioral task
behavioral1
Sample
2a8f5ccfebbbab63162d86be8a76b774.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a8f5ccfebbbab63162d86be8a76b774.exe
Resource
win10v2004-20231215-en
General
-
Target
2a8f5ccfebbbab63162d86be8a76b774
-
Size
7KB
-
MD5
2a8f5ccfebbbab63162d86be8a76b774
-
SHA1
94e2913a2662b074205349e4dd752b127db2f40d
-
SHA256
eb05bbc2dd0746acfcd4384716ae3691015a3c5f3af1207c9743b73515160027
-
SHA512
00cf52a247cda9be7fa413c0502c10ccba5d7812b332b3b4e7ebb7a18b98b9253e1197fc7544984d4c04d3833f40633fe06be6930e605c74c4eb2a25697fb85f
-
SSDEEP
96:oI2k6cdHST8zGdF/FQOD3MtUw3PWSsBkFkAkFkbkKkzvBcYUtl4pI/0lBkmGjSKF:oI76hVxs5Yef9PmQjSKxs0pFGBrdAz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a8f5ccfebbbab63162d86be8a76b774
Files
-
2a8f5ccfebbbab63162d86be8a76b774.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DexCrypt Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ