Static task
static1
Behavioral task
behavioral1
Sample
2bfcec328c260b4f86934e7f928c7e2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2bfcec328c260b4f86934e7f928c7e2e.exe
Resource
win10v2004-20231215-en
General
-
Target
2bfcec328c260b4f86934e7f928c7e2e
-
Size
38KB
-
MD5
2bfcec328c260b4f86934e7f928c7e2e
-
SHA1
bfd7a763a45f6956e022e784e7d6d5a5857cb3b8
-
SHA256
7819d0cb7ab587cbab34d4a9cd57dfd56794859545630b7b268e84b7428d4c75
-
SHA512
2b648a12b679d1fe40c2810f0df2fe656adf97b96e263a7df5c79ca0a82e4dd0f59096a038049e0cf843edbd8ab3ae1e7d23cdc2a775507da49809412a0f597a
-
SSDEEP
768:X32hqVaXthyz8IxtonIJ4yY5rGfF3J1Rd/5va7OO/sedCKFRYwX4Kpj:H2UV8tzIx+nIiywifhQ6O/s8F244A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bfcec328c260b4f86934e7f928c7e2e
Files
-
2bfcec328c260b4f86934e7f928c7e2e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yanlhc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE