Static task
static1
Behavioral task
behavioral1
Sample
2d74e0d2d733dc10cd1a6d03e4fa9558.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d74e0d2d733dc10cd1a6d03e4fa9558.exe
Resource
win10v2004-20231222-en
General
-
Target
2d74e0d2d733dc10cd1a6d03e4fa9558
-
Size
45KB
-
MD5
2d74e0d2d733dc10cd1a6d03e4fa9558
-
SHA1
dc312678d4577376d13cc8b5a25bf35160ab701f
-
SHA256
b4f53f125fcd333da672ad8e0dba40e3165c8dd23a283bc49a958b1777b0ae77
-
SHA512
0f7b8caf1071ad9fd64ec6f72502cf9e81802b5dad6c11978f944af5aacbce305db65cf34c65bc9b3c0ee3575f6084a72272119ca1115e2c5b942d08a3e7f28f
-
SSDEEP
768:VHccV44hPbi2A7IBytA7x5R7b6GQEf7LnCv8wNZJVVJAsVxQJfPCvVW1Q84j:N/lhr1aA1D6uf3nC3JVDpVeBPqUI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d74e0d2d733dc10cd1a6d03e4fa9558
Files
-
2d74e0d2d733dc10cd1a6d03e4fa9558.exe windows:4 windows x86 arch:x86
596cf38e46c396c0f64e4d07c4f6bffe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
GetSystemTimeAsFileTime
WriteFile
msvcrt
time
strtol
strcmp
memset
_itoa
wcschr
_isctype
__set_app_type
strcpy
_ltow
_wcsnicmp
_onexit
_snwprintf
_wfullpath
iswctype
_acmdln
_fullpath
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE