Static task
static1
Behavioral task
behavioral1
Sample
2bd2ab5b0da994ddd1d642bfb9869d3c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2bd2ab5b0da994ddd1d642bfb9869d3c.exe
Resource
win10v2004-20231222-en
General
-
Target
2bd2ab5b0da994ddd1d642bfb9869d3c
-
Size
160KB
-
MD5
2bd2ab5b0da994ddd1d642bfb9869d3c
-
SHA1
f88082761b63babeb0a1a244507cb504d71c064f
-
SHA256
eb5acd42e23ead2e0a62528ba8351ccf8ed8831688c323a520f1157b3d86b9aa
-
SHA512
7a4a7dd62d4462b58b8f60a35edacf0144e184aa7ae62755e06cd844f7552a0379270cf2546368801de52249317bfa807148c2fd11743118633b54366b2abf76
-
SSDEEP
1536:SY8lYsSccCgwWYaziLoF2N2CFLcVygagrCfE7smXlngeW8awk:SBSccsWlXCFLcVygjrsmXuEaR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd2ab5b0da994ddd1d642bfb9869d3c
Files
-
2bd2ab5b0da994ddd1d642bfb9869d3c.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 379B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ