Static task
static1
Behavioral task
behavioral1
Sample
2b209d47678c7a8edead1381c5a0dbc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b209d47678c7a8edead1381c5a0dbc7.exe
Resource
win10v2004-20231215-en
General
-
Target
2b209d47678c7a8edead1381c5a0dbc7
-
Size
14KB
-
MD5
2b209d47678c7a8edead1381c5a0dbc7
-
SHA1
1c158d9cab9fdbbe5803246421de0dd0b6243642
-
SHA256
7e4e191edc865eb62f9e7ab25524aa4ff745e7e1a1ca16394193acd3d91aefce
-
SHA512
b23fcb39f6993d27145814ffebe65757cce4176cb9f3405eb13e3acac080f28524283f69296d8090053d807d767285f5799fd6486dd31f6c07ca3578546b70b5
-
SSDEEP
384:Nzs85iaovUq3j8Fb3tLHT4TTM9cdyAFPEp3TflnpF/:Py8V3tLH0U9cdzFsZT1/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b209d47678c7a8edead1381c5a0dbc7
Files
-
2b209d47678c7a8edead1381c5a0dbc7.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE