Static task
static1
Behavioral task
behavioral1
Sample
2c613e0b0381c34f8b97589e1d05c78a283b066bd8c82c7fe7e9b99f83f9e360.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2c613e0b0381c34f8b97589e1d05c78a283b066bd8c82c7fe7e9b99f83f9e360.exe
Resource
win10v2004-20240508-en
General
-
Target
2c613e0b0381c34f8b97589e1d05c78a283b066bd8c82c7fe7e9b99f83f9e360
-
Size
14KB
-
MD5
8ce187c3dd98cba36250ce9f021843ba
-
SHA1
0887c8a8cc0b4badd3b95db7aaa2c3009ca4fea3
-
SHA256
2c613e0b0381c34f8b97589e1d05c78a283b066bd8c82c7fe7e9b99f83f9e360
-
SHA512
c8b0b990ab7de8a29bb8d20585b0f8d282cb6a54bd44e4f02ed5bdaca53f7f8cec707bc440067f6ca13cad240959110f0f1601d2c64bee2db923d442eb4cc131
-
SSDEEP
384:pfE2SS0IVVVVVVVVVVVVVVVeitEKwDE045H:pStFA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2c613e0b0381c34f8b97589e1d05c78a283b066bd8c82c7fe7e9b99f83f9e360
Files
-
2c613e0b0381c34f8b97589e1d05c78a283b066bd8c82c7fe7e9b99f83f9e360.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ