Static task
static1
Behavioral task
behavioral1
Sample
2c6e0315868d7241a6901decb5faac36.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c6e0315868d7241a6901decb5faac36.exe
Resource
win10v2004-20231215-en
General
-
Target
2c6e0315868d7241a6901decb5faac36
-
Size
122KB
-
MD5
2c6e0315868d7241a6901decb5faac36
-
SHA1
69c75266a8cb0aca46717993ec422123b33cc7ce
-
SHA256
29e77f5d31253f3d940b45be28484a8168fed424f745979a6c0b729b2e0ad95b
-
SHA512
73fa5b29bcdb5ab61a1eda9ffa370cb8da5d56e00fa9b974f40f8df9e5f524bb98e7403e48c7493d67c9daf9168c1a3039ffbe001a16a4bb08d5270cc827eecc
-
SSDEEP
3072:SFAgFKNsiKds1mrR0GxT+Wzb2grzVYzC6MJ5S:gA8KN11PGv2nuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c6e0315868d7241a6901decb5faac36
Files
-
2c6e0315868d7241a6901decb5faac36.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE