Static task
static1
Behavioral task
behavioral1
Sample
7c2f6d937c5f80706605840cc74ede22.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7c2f6d937c5f80706605840cc74ede22.exe
Resource
win10v2004-20231215-en
General
-
Target
7c2f6d937c5f80706605840cc74ede22
-
Size
463KB
-
MD5
7c2f6d937c5f80706605840cc74ede22
-
SHA1
540c16d8c99bc640b45bd22621048a8b63a69bac
-
SHA256
6bbc5ef86b4b64f48acc6effc7370415950d6c19eb5438bcf9a14caf32e2b078
-
SHA512
efb723e6bdd87abb9b90ca1b03f51f90d85265b2e5ac3fb03a9c365118674debc53956abfc63fd1944af14113058b024edc576dfc25a2d796972f2c92aeea41d
-
SSDEEP
6144:YJ+fX0RfvHCYj0QAlzXkH0vvN6oa9WBROOJJ/6tJuCysBz7AEuZ1ioTF9q5UU5R6:z0JvHCYwQG0U3otJxoEujiY9r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c2f6d937c5f80706605840cc74ede22
Files
-
7c2f6d937c5f80706605840cc74ede22.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 387KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ