Static task
static1
Behavioral task
behavioral1
Sample
2b94d6c79c1ece87ec7274453f12262bcf13ae7399576a61b34e2b39ed1a8ddc.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2b94d6c79c1ece87ec7274453f12262bcf13ae7399576a61b34e2b39ed1a8ddc.exe
Resource
win10v2004-20240802-en
General
-
Target
2b94d6c79c1ece87ec7274453f12262bcf13ae7399576a61b34e2b39ed1a8ddc
-
Size
982KB
-
MD5
62caf88cde31efbe3734a1b030907b12
-
SHA1
466b4843729c098a54dadea0a60c330395f47573
-
SHA256
2b94d6c79c1ece87ec7274453f12262bcf13ae7399576a61b34e2b39ed1a8ddc
-
SHA512
eae99272a580b5af8b2d77baa0a51fab813199f4729dc3b186111a60bab1f4d2851e56ada705d77d56283effd6362e2b3369a16de2c9c0814a6ce16defabedb6
-
SSDEEP
24576:3Zy+jvLMas7vN0pYGlxWUtRCo1e/oAl3d+kC+qx:3h0NabHZaJl3gI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b94d6c79c1ece87ec7274453f12262bcf13ae7399576a61b34e2b39ed1a8ddc
Files
-
2b94d6c79c1ece87ec7274453f12262bcf13ae7399576a61b34e2b39ed1a8ddc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
u$\HLCU= Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 634KB - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ