Static task
static1
Behavioral task
behavioral1
Sample
a2c1e0b0b3e24b144aa9fa571c054fe7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2c1e0b0b3e24b144aa9fa571c054fe7.exe
Resource
win10v2004-20240221-en
General
-
Target
a2c1e0b0b3e24b144aa9fa571c054fe7
-
Size
312KB
-
MD5
a2c1e0b0b3e24b144aa9fa571c054fe7
-
SHA1
f1857b8f12834d289f09843938f41f345563e82e
-
SHA256
c25c4c59a8c68ae85be9a11e9217704db1054582fd9b755c56215835bf45e5ea
-
SHA512
dd28fc31c3f730a4fd2243b54870af37c85b05d0a904d7c95b096597aa40d18b52e77c0efaf6f5f41a169bd5d399f225da36a6feadee64968afba3c7b9af50c7
-
SSDEEP
6144:RiIYwpKDc9zzG3Y/KI4lCnNrZGe4zvTDMAlK8Jcr5TCOQz0kf:Ec43UWAS/IGKvlLif
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2c1e0b0b3e24b144aa9fa571c054fe7
Files
-
a2c1e0b0b3e24b144aa9fa571c054fe7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 159KB - Virtual size: 389KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE