Static task
static1
Behavioral task
behavioral1
Sample
2b4cda672d4fad6eb1be80658b06c6c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b4cda672d4fad6eb1be80658b06c6c4.exe
Resource
win10v2004-20231215-en
General
-
Target
2b4cda672d4fad6eb1be80658b06c6c4
-
Size
79KB
-
MD5
2b4cda672d4fad6eb1be80658b06c6c4
-
SHA1
d332d25106d799d7db6f0fa0584517fe0e27092e
-
SHA256
c9a34a3ab34b232d14b1967e5e817b661779e717d4864e8485e3fad4569e604f
-
SHA512
b6551015f340d2638d88e694562cc144aeb9d3806d57dbf5fd69384442680c5dbc3509f9f0af3d2fe65dc80854746f7ca833e3b3d58f6da51380ececd53bdac3
-
SSDEEP
1536:XOQGAyfxjW34aQh4YeT37J2zN7Aha2osnaYVqwvWmiyxxKTn9R4T5NjskC9AJNb:XOQGAyfls4aQ2RfJQNkA2XnDqwHxQnIp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b4cda672d4fad6eb1be80658b06c6c4
Files
-
2b4cda672d4fad6eb1be80658b06c6c4.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1023B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE