Static task
static1
Behavioral task
behavioral1
Sample
2f26f34027b39959263eaaf6fa1f6f4b97ed6398a956d50819d74db2ad3a7ab7.exe
Resource
win7-20231129-en
General
-
Target
2f26f34027b39959263eaaf6fa1f6f4b97ed6398a956d50819d74db2ad3a7ab7
-
Size
6.2MB
-
MD5
243ac7d962616c9c19240cf8930f504e
-
SHA1
d9834bce76008f38b2f1dd900c73241668055bf1
-
SHA256
2f26f34027b39959263eaaf6fa1f6f4b97ed6398a956d50819d74db2ad3a7ab7
-
SHA512
a0e8708fab5111f5f1c759245cc0ff2c239404dfa96a1557091ec8357209b0b819223a28c4fdd3afa0173675bf44157d1e20c5ff14a690b510624012fa6befc5
-
SSDEEP
98304:7fRD9t5m4ccJ2UCcn1Vi/lS6ZQut/N1hm3Mm21Syl3nSDQKhpG086LJ0jppLC5uL:FDxMUCYw/E6DtdGRyBbKhO6VufL4u03c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f26f34027b39959263eaaf6fa1f6f4b97ed6398a956d50819d74db2ad3a7ab7
Files
-
2f26f34027b39959263eaaf6fa1f6f4b97ed6398a956d50819d74db2ad3a7ab7.exe windows:5 windows x86 arch:x86
181161002fd92caf3bb8d385b5c4bbcf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadStringW
CharUpperBuffW
advapi32
RegQueryValueExW
shell32
ShellExecuteW
ws2_32
socket
iphlpapi
GetAdaptersInfo
wtsapi32
WTSUnRegisterSessionNotification
Sections
.text Size: - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BBT Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4GQ Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.|KC Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7$A Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ