Static task
static1
Behavioral task
behavioral1
Sample
2a949b3ab87d459968cc6139b193049b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a949b3ab87d459968cc6139b193049b.exe
Resource
win10v2004-20231215-en
General
-
Target
2a949b3ab87d459968cc6139b193049b
-
Size
385KB
-
MD5
2a949b3ab87d459968cc6139b193049b
-
SHA1
60e92ccfc273e443490d3c5f998bae4789a8d915
-
SHA256
615b321518de34aab08cdc1c7c1c195877c8eb516728e21b3737bb9746a50de3
-
SHA512
f0e6961ff5a2053d439f29219665a5212766051b32ad32844a2f958fd1822fb07ee31d7919c03155f16c91cf1a58a81bd11d04ce979778943d6d130a1d103ad7
-
SSDEEP
6144:2111r/Ok+sQ+OhPV/bzvoIzyH1zuPIUdTMB+D/ldHvj81PbzZzvKB:m1r/LQHhPVTzvoXNxBqldI1TzZbKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a949b3ab87d459968cc6139b193049b
Files
-
2a949b3ab87d459968cc6139b193049b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ