Static task
static1
Behavioral task
behavioral1
Sample
2a2618a79dcdef968ffdbd83eac1a15d705f3ce189f6ef5b506b1235a3f6b8e4.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a2618a79dcdef968ffdbd83eac1a15d705f3ce189f6ef5b506b1235a3f6b8e4.exe
Resource
win10v2004-20240611-en
General
-
Target
2a2618a79dcdef968ffdbd83eac1a15d705f3ce189f6ef5b506b1235a3f6b8e4
-
Size
804KB
-
MD5
09072c63bf6b7b4b16c4000cd15faf69
-
SHA1
48b7f88573ca5849ae1bb2495ae35602baf83f41
-
SHA256
2a2618a79dcdef968ffdbd83eac1a15d705f3ce189f6ef5b506b1235a3f6b8e4
-
SHA512
d18d9e50e65a56e7553792517f79414373ed0e5d631a9e7789c6e1b5ac5b98f8c9c7066b1f5c4a3498fec0e2661b2c3efb85b0d7788965221602f5978a557b87
-
SSDEEP
24576:ECTC3c6eWT56abnuA4y4pCmncHCHzs8j4gtY+VTqCI:Eyq56abnuNpCmncH81j4gtY+VTqd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a2618a79dcdef968ffdbd83eac1a15d705f3ce189f6ef5b506b1235a3f6b8e4
Files
-
2a2618a79dcdef968ffdbd83eac1a15d705f3ce189f6ef5b506b1235a3f6b8e4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ