Static task
static1
Behavioral task
behavioral1
Sample
2d6509e848d925c3ca6c795faa9453a0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d6509e848d925c3ca6c795faa9453a0.exe
Resource
win10v2004-20231215-en
General
-
Target
2d6509e848d925c3ca6c795faa9453a0
-
Size
141KB
-
MD5
2d6509e848d925c3ca6c795faa9453a0
-
SHA1
45b99ccc3c20f438726a844c7ce42a4972ef66c9
-
SHA256
c60b62ad5d338aa4994427bd14434b8cddc3403c2de484bb84c843332f08212d
-
SHA512
d5b862d8e79693245e4d16ea3e98ffe14e431781c0248f63a74b0fcd8d18e4abe3c22034e01f7ea1f1622d583c18a2ae6ef4bc4dc545d7dbb87a14772f760ebf
-
SSDEEP
3072:DYlw3mt6jEerdEsgQ+DUkPhqeIz0FwrxAjL:0lzt6jRRTx+fPQ0+ti
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d6509e848d925c3ca6c795faa9453a0
Files
-
2d6509e848d925c3ca6c795faa9453a0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
pivvq Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ohkj Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewmzw Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE