Static task
static1
Behavioral task
behavioral1
Sample
2ad951a82ec370856bfac61e537238af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ad951a82ec370856bfac61e537238af.exe
Resource
win10v2004-20231222-en
General
-
Target
2ad951a82ec370856bfac61e537238af
-
Size
40KB
-
MD5
2ad951a82ec370856bfac61e537238af
-
SHA1
fa5797f2b0dfdfb69ad4bebc149e25672f2bd644
-
SHA256
032ae98c4df58e2210d21bc2173ae2bba3ff1cd83fd192643ae36f87da13b90d
-
SHA512
85e214a65e71eb5b8059fb6433f372378f8f10bacaa065ce9f1370af9d822321f0a58a6579e92d583c6e8008cb9db7100729c151734e29e88a6058b5d4755348
-
SSDEEP
384:zc8ZhffrXAsi07o1FBoT8AN1CDqB8lFNR5fU5933a8Chq:IFsi07o1FBowskS68kq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ad951a82ec370856bfac61e537238af
Files
-
2ad951a82ec370856bfac61e537238af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 17KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ