Static task
static1
Behavioral task
behavioral1
Sample
2683b5afb053524e523df1f28278d89c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2683b5afb053524e523df1f28278d89c.exe
Resource
win10v2004-20240226-en
General
-
Target
2683b5afb053524e523df1f28278d89c
-
Size
342KB
-
MD5
2683b5afb053524e523df1f28278d89c
-
SHA1
29c39fbcf9ab5ee4d5d15a0631381a8cc95885a0
-
SHA256
2e4c437b7d3cf535c86652b90c26867c4c479371d3baf5508fa5b89b659e265b
-
SHA512
c978abe03e9f415e37a5ab947de7c02f5f014635ae87946e60e1c0195d7444a42c8ff7e2a7505e97d77e1c22b7963984c565fb2cc2e7b4ee0331218e209f0b7d
-
SSDEEP
6144:rqppuGRYx4H712f/SBTpzZA6rXD40b+7TJ4yR:rqpNtb1YIp9AI4FL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2683b5afb053524e523df1f28278d89c
Files
-
2683b5afb053524e523df1f28278d89c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NDltoTPW Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJrdyPER Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE