Static task
static1
Behavioral task
behavioral1
Sample
2cd09047bf2fd9df6f6085d31447b7c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cd09047bf2fd9df6f6085d31447b7c7.exe
Resource
win10v2004-20231215-en
General
-
Target
2cd09047bf2fd9df6f6085d31447b7c7
-
Size
394KB
-
MD5
2cd09047bf2fd9df6f6085d31447b7c7
-
SHA1
46eeca155911a3f7cb4eeb8389535952f0c0b29a
-
SHA256
7c39bc8daa5460e915ebb40b98786b0f25fc1a3cb89525da4b723d001e29877e
-
SHA512
b010cbf2bb042e707c45ae8d68bf2b3fe65f87a5c8ef42b42628e555ea10f1118dd24086f0fd9606be59cc2337ec26d50918da58e652cddbcf467e6588929f3b
-
SSDEEP
12288:ORxqq0+stttgk1ltttvBz/TvDtttSfc1bIp+/e7g0Y:sq5+m15LbsEep+/Ygj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd09047bf2fd9df6f6085d31447b7c7
Files
-
2cd09047bf2fd9df6f6085d31447b7c7.exe windows:4 windows x86 arch:x86
d436c55cc61e4d62b21359ff12be3c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
MethCallEngine
Sections
.text Size: 87KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 306KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE