Static task
static1
Behavioral task
behavioral1
Sample
2ec51571b32b16b55514df4373432520N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ec51571b32b16b55514df4373432520N.exe
Resource
win10v2004-20240709-en
General
-
Target
2ec51571b32b16b55514df4373432520N.exe
-
Size
31KB
-
MD5
2ec51571b32b16b55514df4373432520
-
SHA1
c34380de2dd8d1bf7a00066c3c215956976feee1
-
SHA256
a3930d1b9c106c0d2239100dd5e7d47baae59453d958ebea3c399388376c131a
-
SHA512
7f35d4a658d109275b1d534e1bf039cb0a5eada7a698566ee7c96aefcdf81542f46ef714a6478cadccfc3e11c2d7b6fb445e737d4c7e707337963aac5700681c
-
SSDEEP
768:7JpMcU2hW/IzV/K7m/41b0HnuaN7Dq5zpywAiP:bMcU28wzV/KKg1b8u9zpwK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec51571b32b16b55514df4373432520N.exe
Files
-
2ec51571b32b16b55514df4373432520N.exe.exe windows:5 windows x86 arch:x86
0782c9fdd7089bfa1ad7456fcd548e92
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
gdi32
TextOutW
user32
EndPaint
Sections
.MPRESS1 Size: 21KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE