Static task
static1
Behavioral task
behavioral1
Sample
2ce4f60c0ac7ef6983c78aad3108e74b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2ce4f60c0ac7ef6983c78aad3108e74b.exe
Resource
win10v2004-20231215-en
General
-
Target
2ce4f60c0ac7ef6983c78aad3108e74b
-
Size
327KB
-
MD5
2ce4f60c0ac7ef6983c78aad3108e74b
-
SHA1
79553100d5792e0f453a7ebad0a760610e51e3f7
-
SHA256
5e83445e461e5c7771f91430ff5afd83c93b685c1abc21684baad43345322217
-
SHA512
384829f755309c376173ba650074830dba08929bdaa20f5e67ecf7e37fbee18e8837eb9466d4f49322f0d61c382e61bd723b1c4414fac32c9ab9ecb8dbce5118
-
SSDEEP
6144:+CNP1Sm1AMmE3cLtW09Ekh0wWf5KuvGv+Gep17xnc5M6bQb10LtJ8fuTVWwfx9eO:bkGZpcLLhkf5lvGhep17xncf8kta7wf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ce4f60c0ac7ef6983c78aad3108e74b
Files
-
2ce4f60c0ac7ef6983c78aad3108e74b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vip Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE