Static task
static1
Behavioral task
behavioral1
Sample
2b2261f9f2a620ed9e8f2ba0e2373765.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b2261f9f2a620ed9e8f2ba0e2373765.exe
Resource
win10v2004-20231215-en
General
-
Target
2b2261f9f2a620ed9e8f2ba0e2373765
-
Size
434KB
-
MD5
2b2261f9f2a620ed9e8f2ba0e2373765
-
SHA1
d21a8091ccee1e66748e87beb92f07f7061ca7c6
-
SHA256
24c4454144cda50569cb5b6389a758755f633504ad1c16fa91c2066b8120e97c
-
SHA512
aeab916fdf1932d7a2a97a8be208687bd8dbf733741fb5c48e9c7ad4058af3d10455bb91ac31e0429937073a42511f9009491963f32a1d4b4cb56ae266d73107
-
SSDEEP
12288:Smuc98lBMFzNYtktAEj8yI3+XILotHxWaMaGS6Vo:SCu+h4fEj8yIcJHxNN6Vo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b2261f9f2a620ed9e8f2ba0e2373765
Files
-
2b2261f9f2a620ed9e8f2ba0e2373765.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE