Static task
static1
Behavioral task
behavioral1
Sample
2bef1ec4c1752bd4be0d985e255119e0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2bef1ec4c1752bd4be0d985e255119e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
2bef1ec4c1752bd4be0d985e255119e0N.exe
-
Size
4.2MB
-
MD5
2bef1ec4c1752bd4be0d985e255119e0
-
SHA1
a28578accbb2f6d5545aaa8134b4b0dcdd5be8bc
-
SHA256
29f1279162c1bcde3d96fab842d8fda9adaa2ccaceb05817e6ebd14b75e2c034
-
SHA512
755c1d97334609b32a2ff22a9541071782f6cf8749dba94acf435f821bd6f2bc08ef00448086445da02f20aa65f4c41421d308aa887119acf96d0075720f12f4
-
SSDEEP
98304:W67VQUP5RwHIpMrtta0uiYu5yguZ/3LeBQVP84t4avQ:W6Bb/wo2ttqRCopC4g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bef1ec4c1752bd4be0d985e255119e0N.exe
Files
-
2bef1ec4c1752bd4be0d985e255119e0N.exe.exe windows:5 windows x86 arch:x86
9d6bdd43fbc47fffffa967a45b8c6d78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
convertercore
?ItemExists@TranscoderModel@@ABE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
Sections
Size: 833KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdsiurhj Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kgdzynfo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE