Static task
static1
Behavioral task
behavioral1
Sample
2b142cea071b648c19957aa9909d5b12.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2b142cea071b648c19957aa9909d5b12.exe
Resource
win10v2004-20231222-en
General
-
Target
2b142cea071b648c19957aa9909d5b12
-
Size
1.8MB
-
MD5
2b142cea071b648c19957aa9909d5b12
-
SHA1
5d99737d1942fc339e02ac68d38a981da99bbd32
-
SHA256
4f56fd4e05d56354e7a16d94f8bc02297c5f9b52bec29a4878b780c5ae00806b
-
SHA512
27ec9f742ab0ac355f7dec914784f257f17c5acf94ac6859e436c54e7d55bfdf668f228400a916636e7d6fb7c638b8bed1f0c353890546273c93057af1fd8714
-
SSDEEP
24576:4wh3DoJdXN0BN2qnw4a+edxoBrLdgg1cuzKPgssStPUvgB:xoJdXN0BMOwLloBrug1hKPgssSt2gB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b142cea071b648c19957aa9909d5b12
Files
-
2b142cea071b648c19957aa9909d5b12.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 360B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ