Static task
static1
Behavioral task
behavioral1
Sample
2b4379497b85f650e12eaf4d9e7a129b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b4379497b85f650e12eaf4d9e7a129b.exe
Resource
win10v2004-20231222-en
General
-
Target
2b4379497b85f650e12eaf4d9e7a129b
-
Size
215KB
-
MD5
2b4379497b85f650e12eaf4d9e7a129b
-
SHA1
6311bd81b659e14f267784514fb3f1eeb7417fb2
-
SHA256
0334e0d5d29d41c3eb0831a692ed03b3f8bf3775c5eef3b5e3a137bb19173ddd
-
SHA512
8e4b89816d157c35f293cdfb82c4554f5a4f56b9360a14e39fe0caf33e93780f306a86394e2a19c72638475e7c9724f6acb493745c3ece2b5f6752dd167161ba
-
SSDEEP
6144:Lgxc6LDVQlOp/ddMRW2h1JS+ItBAA/48qS//Dwy:cm6LDVQktMdhTS+IJySjb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b4379497b85f650e12eaf4d9e7a129b
Files
-
2b4379497b85f650e12eaf4d9e7a129b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
3ygj60 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3ygj61 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3ygj62 Size: 870B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE