Static task
static1
Behavioral task
behavioral1
Sample
2e5d4d2863d0bd1eb856a4566b9ce9fc5ffb0e036202e2c2dc7bc64e27bd9c13.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e5d4d2863d0bd1eb856a4566b9ce9fc5ffb0e036202e2c2dc7bc64e27bd9c13.exe
Resource
win10v2004-20240802-en
General
-
Target
2e5d4d2863d0bd1eb856a4566b9ce9fc5ffb0e036202e2c2dc7bc64e27bd9c13
-
Size
1.5MB
-
MD5
9c8c14608c0b1765c66e1e0014e02c67
-
SHA1
ca5e99abf8532fa60fef31c15b1fe9fd0c6720b2
-
SHA256
2e5d4d2863d0bd1eb856a4566b9ce9fc5ffb0e036202e2c2dc7bc64e27bd9c13
-
SHA512
6be14f69ef04b8cba4a0437271ecb42152fac4e174c2682515df32329b6991e338c28cc625ba28307921c439ff2ab3ecc2fba9d375171223166d1379d8658914
-
SSDEEP
12288:3EvD5QlDBZe4pxuIxiQhG8QqYKxOgnOhLdJRe5/1YPZWFxd8WPaONPYufrYmvxGp:5lDPe5IHcqDOY2m6ZWfd8CavpmVIjn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e5d4d2863d0bd1eb856a4566b9ce9fc5ffb0e036202e2c2dc7bc64e27bd9c13
Files
-
2e5d4d2863d0bd1eb856a4566b9ce9fc5ffb0e036202e2c2dc7bc64e27bd9c13.exe windows:0 windows x86 arch:x86
d3ed510fc1b4c57d6831d81472d34940
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
MessageBoxA
msvcrt
srand
Sections
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 808KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE