Static task
static1
Behavioral task
behavioral1
Sample
2add03bd3a5063524b68efb802635fa3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2add03bd3a5063524b68efb802635fa3.exe
Resource
win10v2004-20231215-en
General
-
Target
2add03bd3a5063524b68efb802635fa3
-
Size
14KB
-
MD5
2add03bd3a5063524b68efb802635fa3
-
SHA1
a5ce9b45399471fe2202459dbc5e47570294238f
-
SHA256
7df14c1e2fd3ce609f2aaa5cadbcd89ad99d4feed4f9c1d0d8800354d2b35905
-
SHA512
c32951bfd91b445a548c6972898a106e93bfdbf2599851fa4d3dc62f1faac9c081a13cfaa563cc8d8f6b3ff173fbf614dbb81919e0f330cfdc0b007a61d91e3a
-
SSDEEP
384:1YDMtKjmr60bGnCX4Rvj5wjmcsQ4mBE4K:1vz60bFX4+mBb1t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2add03bd3a5063524b68efb802635fa3
Files
-
2add03bd3a5063524b68efb802635fa3.exe windows:4 windows x86 arch:x86
94c7366d739e7bf962bb011f2c5fab76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GlobalAlloc
ExitProcess
Sections
���1 Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XOR Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE