Static task
static1
Behavioral task
behavioral1
Sample
2ca1bbf39f1d553bc3f8b4f47015cd2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ca1bbf39f1d553bc3f8b4f47015cd2e.exe
Resource
win10v2004-20231215-en
General
-
Target
2ca1bbf39f1d553bc3f8b4f47015cd2e
-
Size
39KB
-
MD5
2ca1bbf39f1d553bc3f8b4f47015cd2e
-
SHA1
5edd586a5334aadc8a86d969cb7ce1a33f93a04e
-
SHA256
81756068909f3693d389746ffeef1a48fb991c54dc333c89b670034a6487e004
-
SHA512
1b875b035c5a197948ef4ae4446923122816bcea0a6f4d128809e44dda3f268a3eccbe64d684f13de249dedf5d0827b1a89f052e674369e5ec60e1d23fd1861c
-
SSDEEP
768:k65rCnY1NpYwMWl8y9V38AMKBQxOoQXFDU+PSX4P:k2wHW7VsAlQxPQXaSSX4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca1bbf39f1d553bc3f8b4f47015cd2e
Files
-
2ca1bbf39f1d553bc3f8b4f47015cd2e.exe windows:4 windows x86 arch:x86
27c18632376907b79f5081a156a2aa35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoW
GetNamedPipeInfo
GetProcessHeaps
GetStdHandle
GetProfileIntW
GetCurrentDirectoryW
GetDiskFreeSpaceW
msvcrt
_wtol
_wutime64
_wmakepath
_wstat
_wrename
_wsopen
_wcsupr
Sections
.text Size: 18KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE