Static task
static1
Behavioral task
behavioral1
Sample
2e1f26ab4dbcbe6e8728bca1886c7e1ab490b5f616cfdd14ae7f1bc86116a861.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2e1f26ab4dbcbe6e8728bca1886c7e1ab490b5f616cfdd14ae7f1bc86116a861.exe
Resource
win10v2004-20231215-en
General
-
Target
2e1f26ab4dbcbe6e8728bca1886c7e1ab490b5f616cfdd14ae7f1bc86116a861
-
Size
1.1MB
-
MD5
1d6982e35917ae47d720b30828741764
-
SHA1
e37af46f9954c1386f8ee8420c70d09efa925867
-
SHA256
2e1f26ab4dbcbe6e8728bca1886c7e1ab490b5f616cfdd14ae7f1bc86116a861
-
SHA512
0ef3c1f7c817485514940f87d3a8d2c5b746f8ff8aa9e4ba1ada63bab474075b20d0a4a33389d87f2e0d1c0cd63754d8ca27f5c642b459fa99783203dabaf4a6
-
SSDEEP
24576:vBF6727HeoPO+XC7A9GaFu3PzZtvIaWrmRwDOb4rL2Ryykg28M:rOYkZtgvrmRUugy8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e1f26ab4dbcbe6e8728bca1886c7e1ab490b5f616cfdd14ae7f1bc86116a861
Files
-
2e1f26ab4dbcbe6e8728bca1886c7e1ab490b5f616cfdd14ae7f1bc86116a861.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 278B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 183KB - Virtual size: 183KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 148KB - Virtual size: 147KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/59 Size: 123KB - Virtual size: 123KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/75 Size: 512B - Virtual size: 32B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/90 Size: 512B - Virtual size: 34B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/109 Size: 749KB - Virtual size: 748KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 882B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 317KB - Virtual size: 316KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE