Static task
static1
Behavioral task
behavioral1
Sample
c2a02292c085abb7832d6eb554b8383d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2a02292c085abb7832d6eb554b8383d.exe
Resource
win10v2004-20240226-en
General
-
Target
c2a02292c085abb7832d6eb554b8383d
-
Size
113KB
-
MD5
c2a02292c085abb7832d6eb554b8383d
-
SHA1
1d1217c08b73a9c5b0517786cd8b37bcd019fd85
-
SHA256
c3e2c148337ffc38983ae96ecd5b493870d0c07fa10624bc4bbccd067e830434
-
SHA512
2f4b3e590da79d05fff6d0a59feb8c0164e64711e36daba3984cff38219c81b04657d098203a05809fdfbff89252405b03f4ebd6096e15e36f35a1a67de9fb80
-
SSDEEP
3072:5Fbb/TqbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7w:5VkwvP6bQ7yMP+DE827w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2a02292c085abb7832d6eb554b8383d
Files
-
c2a02292c085abb7832d6eb554b8383d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xXx Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE