Static task
static1
Behavioral task
behavioral1
Sample
2cfdf48452883e1c52970ef69220d1ae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cfdf48452883e1c52970ef69220d1ae.exe
Resource
win10v2004-20231215-en
General
-
Target
2cfdf48452883e1c52970ef69220d1ae
-
Size
532KB
-
MD5
2cfdf48452883e1c52970ef69220d1ae
-
SHA1
b2ef9deaaceb56a13c1a69a911880a2b43e0383b
-
SHA256
593b967e39cb4a4412e6b75d1f1528fe6c0ae2b078dd8e06a6fe2f37a618097a
-
SHA512
7d917ac1950ee1e2fccf6e48b3db2b988bba1eb001845ff0392b377499bc2d2e6eb158c84c4e2bb772ea0c4173e8565321ce10bd3e4eee0c4cd5a55ef1939dff
-
SSDEEP
12288:ZuvO+XghV5XN+zaslsZ6hioSdRKg6oIa1fszcxCPnJgSqcnES:ZuGaghLdClsjoSdRx6ol1fK4Y+GES
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cfdf48452883e1c52970ef69220d1ae
Files
-
2cfdf48452883e1c52970ef69220d1ae.exe windows:4 windows x86 arch:x86
9f3d436dd93b83965a0be34ab16ca185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
SetupComm
GetFileInformationByHandle
FileTimeToSystemTime
GetSystemPowerStatus
UnhandledExceptionFilter
SetConsoleCP
GetStartupInfoA
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ