Static task
static1
Behavioral task
behavioral1
Sample
a2815260998fd9e8a05091c0462cbd5b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2815260998fd9e8a05091c0462cbd5b.exe
Resource
win10v2004-20240221-en
General
-
Target
a2815260998fd9e8a05091c0462cbd5b
-
Size
268KB
-
MD5
a2815260998fd9e8a05091c0462cbd5b
-
SHA1
f2c142bfd5d9d484e432a9a383c4f86f248e3ff4
-
SHA256
df7b1f9493a99f1dd4399531d6e1840f31ca0c68c3980a46a0e0f40f476c17e1
-
SHA512
4ee3011aaf6d9304bced6c27b0d6312c033eedf9007c86a25dff07d9de8a7e33de17d3234c8294445dd0f88c5a249b3a14023cfe90d0962fc79206703ebefb73
-
SSDEEP
6144:WKW/QUQL0U3bLi8ve3uLdCZcx5jsFxoPemDtmvMY3:WKW4UQ4U3bLip3qCZy5gFxo9Do0C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2815260998fd9e8a05091c0462cbd5b
Files
-
a2815260998fd9e8a05091c0462cbd5b.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE