Static task
static1
Behavioral task
behavioral1
Sample
2b82a88465cd7f47c00ee34cced306bdd50c36a7e2314b758efbb3ef8ddb83dd.exe
Resource
win7-20240221-en
General
-
Target
2b82a88465cd7f47c00ee34cced306bdd50c36a7e2314b758efbb3ef8ddb83dd
-
Size
2.3MB
-
MD5
5a4757070c91c41d402fe9eb9f5adf37
-
SHA1
6cf2a22d66e508852d0b9e9a45e0cbdad791ded3
-
SHA256
2b82a88465cd7f47c00ee34cced306bdd50c36a7e2314b758efbb3ef8ddb83dd
-
SHA512
308de06592c0e18ab001bdc92f7d8e5620ded12ea42e7be39384c2049b8cdbaee310caa18c67b1243904c916c1c6496b30c7cd821bf02ae0ed308d7e56e02264
-
SSDEEP
49152:6pVIQ8cFhNvt087ffdsXuRhXDLrf81znc5c+uwOwIQSuFoqJ7ugTfAAw:a8cFnAu78Rc5CeRJ7ugm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b82a88465cd7f47c00ee34cced306bdd50c36a7e2314b758efbb3ef8ddb83dd
Files
-
2b82a88465cd7f47c00ee34cced306bdd50c36a7e2314b758efbb3ef8ddb83dd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 573KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmpmyfro Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ycwwlnfr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE