Static task
static1
Behavioral task
behavioral1
Sample
2d6196c5f13a9ab138a07b7e00e655a7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d6196c5f13a9ab138a07b7e00e655a7.exe
Resource
win10v2004-20231222-en
General
-
Target
2d6196c5f13a9ab138a07b7e00e655a7
-
Size
126KB
-
MD5
2d6196c5f13a9ab138a07b7e00e655a7
-
SHA1
99f2ef4ad5c7cb718f333491cea30a899669e339
-
SHA256
b998f570d0a933183350f89e65cb20005a3ce5074cf9070e5723f2179e312d8d
-
SHA512
ca3e1d77ab7941d494ef345e9519689a0cb0d48ee5e0a23666e2c5c86b9321322cce12e386a405bb8df2f7dc63a8c0ddd455ccedbbdac98a9b4c25b06914dacc
-
SSDEEP
1536:UM7WLTWaVP0KC2vl32VWs+5KKwtoIPzHF/Uzw31sOOe1jaMNncEicF9qvXCEEDqa:UK2mql32NqNEoIPzowFnxj1icq2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d6196c5f13a9ab138a07b7e00e655a7
Files
-
2d6196c5f13a9ab138a07b7e00e655a7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 9KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ