Static task
static1
Behavioral task
behavioral1
Sample
2a597f7263908d96d2d59a03680e0bf19f21fd099432553e1d142e6382c1f256.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a597f7263908d96d2d59a03680e0bf19f21fd099432553e1d142e6382c1f256.exe
Resource
win10v2004-20240426-en
General
-
Target
2a597f7263908d96d2d59a03680e0bf19f21fd099432553e1d142e6382c1f256
-
Size
94KB
-
MD5
ae92b1396e2d60be7c4a2c801bc18274
-
SHA1
d3c7fd2ae889f7908e87805bace09d90258c675d
-
SHA256
2a597f7263908d96d2d59a03680e0bf19f21fd099432553e1d142e6382c1f256
-
SHA512
3018aa435bd91a9b1c4a448c2761fe061cf790789dec906a2d40dba59e1146c3c3c2c2d752f3392cbe37ac625b972ac623a38459cee7b6b5d1555596b9dc60fc
-
SSDEEP
1536:wUh6P6BIRA2l9kTt2IdWST0mXcz4Cpz7W5vuiWpOyRQDARfRa9HprmRfRZ:w66VC2URvdWoXcDz7WREpReDA5wkpv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a597f7263908d96d2d59a03680e0bf19f21fd099432553e1d142e6382c1f256
Files
-
2a597f7263908d96d2d59a03680e0bf19f21fd099432553e1d142e6382c1f256.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ