Static task
static1
Behavioral task
behavioral1
Sample
2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2.exe
Resource
win10v2004-20240226-en
General
-
Target
2.exexx
-
Size
20.9MB
-
MD5
77a5bd4e03fc9a653b4e8c33996d19a0
-
SHA1
e8ce97553a6ab2ca5a8d0cef7ce92ea750433b38
-
SHA256
f417007224bc2b16cc208eb26c1543340529a00ac8c919582eccd7d60a235243
-
SHA512
0bf7cbde60769889c081013226bc1560b16878aec3c0ec9f920a664eb398b8cc8f0876456606e0c3afa9ac71f72cd674f95d0109ff631358e2f17f412fd58091
-
SSDEEP
393216:4gvTZpHwaGiMOLI6CmO6POPjUGvzBgvTZpHwaGiMOLI6CmO6POPjUGvz:9TZ9waxMOtL5gAozyTZ9waxMOtL5gAoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2.exexx
Files
-
2.exexx.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10.4MB - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tdhs Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qqfv Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hnce Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ