Static task
static1
Behavioral task
behavioral1
Sample
2af6d99e2d62f115cb53a56b221c7179.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2af6d99e2d62f115cb53a56b221c7179.exe
Resource
win10v2004-20231215-en
General
-
Target
2af6d99e2d62f115cb53a56b221c7179
-
Size
3.5MB
-
MD5
2af6d99e2d62f115cb53a56b221c7179
-
SHA1
61593a4c8951c8fc33e9d88584f5ec1cb723fa0c
-
SHA256
0440bd8f64f00686e5aa5ce00ff7bb1b4f3e6fdac53f6a4533861f28918ba8da
-
SHA512
9c4c4c5765572a97f30d05e391f8985b22c241d506881ba2f5735551ea044e0920145110ae1c7bba6e0ac65f40e0e3090f728dad9ea1601a63ea340c6eca3085
-
SSDEEP
98304:fNm7+flM+M6RkMkIM7jWCJeqSeq3YOXwnS4rV:HGeqSeqoI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2af6d99e2d62f115cb53a56b221c7179
Files
-
2af6d99e2d62f115cb53a56b221c7179.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ