Static task
static1
Behavioral task
behavioral1
Sample
2b2c4d27eb97f8395aa860d1e78daafa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b2c4d27eb97f8395aa860d1e78daafa.exe
Resource
win10v2004-20231215-en
General
-
Target
2b2c4d27eb97f8395aa860d1e78daafa
-
Size
136KB
-
MD5
2b2c4d27eb97f8395aa860d1e78daafa
-
SHA1
54bab0e9e9445e14ce9af0899ee575de4a93c8db
-
SHA256
adadcaea2eec3219c632f59e3919664af56aee4469d2c5277eb679934e302d62
-
SHA512
f8f2a70a5e58e21d3cf878e47beba4733c74bf20f22b30b57a6b75fefb9a1bd693113164a0f4bfa7c0b659a9570f7bf77cc60b87f910757fa6281193c2afbde6
-
SSDEEP
3072:4A+L7LOwlk2UFUhu9L4fZMeqNvsodMgePTt/Qj7DKZANbi:X+HLOl2UQu9L4fLWV2lP54j7u+Fi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b2c4d27eb97f8395aa860d1e78daafa
Files
-
2b2c4d27eb97f8395aa860d1e78daafa.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
.gdata Size: 71KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 15KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE