Static task
static1
Behavioral task
behavioral1
Sample
2f0328a06a3cd6f0c63ac821fb41e12712e7253e55898a695ac49cc190e0103e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2f0328a06a3cd6f0c63ac821fb41e12712e7253e55898a695ac49cc190e0103e.exe
Resource
win10v2004-20240412-en
General
-
Target
2f0328a06a3cd6f0c63ac821fb41e12712e7253e55898a695ac49cc190e0103e
-
Size
699KB
-
MD5
a0dbe6802f3a632917a2653011c22874
-
SHA1
2c1129d0524feadb7f77d0cfe2dac2d74bf2ba69
-
SHA256
2f0328a06a3cd6f0c63ac821fb41e12712e7253e55898a695ac49cc190e0103e
-
SHA512
a6d7e02ccddffc3be53c229c59647e14f407974ece0ed14caaebeba29728c477485f13c754e00560e42c4865ba67bd6e8e7ef8dac94f56b3502592eeb8b2e35d
-
SSDEEP
12288:ofahbh+1pnp12ffno591CisAhO6C3LvidItpXILRa8d5dakJd+oNg/M2:gMF+1p3mnk1FhO6C7Kam55dak5N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0328a06a3cd6f0c63ac821fb41e12712e7253e55898a695ac49cc190e0103e
Files
-
2f0328a06a3cd6f0c63ac821fb41e12712e7253e55898a695ac49cc190e0103e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 692KB - Virtual size: 691KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ