Static task
static1
Behavioral task
behavioral1
Sample
2c015a5f744eb35eeb9ce1bee66dcfbf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c015a5f744eb35eeb9ce1bee66dcfbf.exe
Resource
win10v2004-20231215-en
General
-
Target
2c015a5f744eb35eeb9ce1bee66dcfbf
-
Size
2.2MB
-
MD5
2c015a5f744eb35eeb9ce1bee66dcfbf
-
SHA1
522845d1e7ad85655ba014d8b287ebd267807d91
-
SHA256
88d8efde657778b8f72677c9b2ed709e163aadfcc8153935468a4dd08a82da03
-
SHA512
d99544aee92cb31042199fa7bd31389bb4e8c63ee3036b9c46b44dac576effe13bba44cd049957668215d3f4c661142d201bb8e61f4bd18c4cfb55df2ea699be
-
SSDEEP
49152:eaLe9xpKU+hYPGvsE8bwhVvz/k1mpJFbjYi9bkSGyuUAlBely:ncxp1LE18eVGmpXYi5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c015a5f744eb35eeb9ce1bee66dcfbf
Files
-
2c015a5f744eb35eeb9ce1bee66dcfbf.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
.WWP32 Size: 463KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWP32 Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWP32 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWP32 Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWP32 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 16.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWP32 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE