Static task
static1
Behavioral task
behavioral1
Sample
2cad6fd72b3704d3b4799eb8945568a1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cad6fd72b3704d3b4799eb8945568a1.exe
Resource
win10v2004-20231222-en
General
-
Target
2cad6fd72b3704d3b4799eb8945568a1
-
Size
215KB
-
MD5
2cad6fd72b3704d3b4799eb8945568a1
-
SHA1
60e41441709654b74573563b182e6f3f2d10e207
-
SHA256
e18e5ecfaa2b8b35d8c7920f2af16f32f4161dfe630921d709d24a21e1f3fa3b
-
SHA512
21968d4727bbc98e042afd32aad165562a98e34cc72d28fc267b010753f0bb1167fe1cd93f4f8865de010d94394eb295dd0c8ddee4442d849a0c77879b5038a5
-
SSDEEP
6144:NKlRIwag0bg7vxVLWnCAZC+ZDGErKf3nYbbBZaKb:NaWzgMg7v3qnCiMErQoN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cad6fd72b3704d3b4799eb8945568a1
Files
-
2cad6fd72b3704d3b4799eb8945568a1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ