Static task
static1
Behavioral task
behavioral1
Sample
2c54eaf5f73673f9510f1656ccd08433.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c54eaf5f73673f9510f1656ccd08433.exe
Resource
win10v2004-20231222-en
General
-
Target
2c54eaf5f73673f9510f1656ccd08433
-
Size
416KB
-
MD5
2c54eaf5f73673f9510f1656ccd08433
-
SHA1
056bf89ee280b1b3a293345a8a44bb7843903c5b
-
SHA256
dd382b9a694da32c87f6c4e7b62cce3f2e421330f1016781e443a7ddc142e7f7
-
SHA512
80fe4d48b91fd59c1dbe5a15cec64ee82c7a402cae7750ee984d3be573c1e16a36e52b005787b866c04366117481afd925a50101a32bf2b1bac41a4a8522055a
-
SSDEEP
6144:b0h3b0nyI44xP+BfJ0Moadp4oGL9wnSkgioJ553a5KV+MzLObSITnUvyklXWF:4h3bMyI44YBHnXM55j+ALO2IuLS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c54eaf5f73673f9510f1656ccd08433
Files
-
2c54eaf5f73673f9510f1656ccd08433.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 329KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ