Static task
static1
Behavioral task
behavioral1
Sample
2bdc3e7e6d33976cf3d2ba7607fc3da2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2bdc3e7e6d33976cf3d2ba7607fc3da2.exe
Resource
win10v2004-20231215-en
General
-
Target
2bdc3e7e6d33976cf3d2ba7607fc3da2
-
Size
296KB
-
MD5
2bdc3e7e6d33976cf3d2ba7607fc3da2
-
SHA1
aeb07cd1f867a5b39d563a458747409859b512c0
-
SHA256
9345a17a59313e69507233a0b16320c0513b4d22d946c5dfbf673c882934e63e
-
SHA512
48e02eea91b337b1da3ef6025e68877f2229569785575d75ce96acc54d54bb36d76cccd435ac40f284700ab4b3f8c2fea0a91efe5acfeaed4d3982390df63f95
-
SSDEEP
3072:DGUj+DAlqFCwbMVqnmltPbd9EPM7pZ70ex6Kodsx7lc1IASG0Mm15ZMTBSXiL6lW:aUjaFU0mHdG0E1vOZMVSBFU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bdc3e7e6d33976cf3d2ba7607fc3da2
Files
-
2bdc3e7e6d33976cf3d2ba7607fc3da2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
888aa40 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
888aa41 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
888aa42 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE