Static task
static1
Behavioral task
behavioral1
Sample
2cfb335c214f4790713d2a880188d4bbb3f946e1f025b555682aedc60a9e7f8a.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
2cfb335c214f4790713d2a880188d4bbb3f946e1f025b555682aedc60a9e7f8a.exe
Resource
win11-20240802-en
General
-
Target
2cfb335c214f4790713d2a880188d4bbb3f946e1f025b555682aedc60a9e7f8a
-
Size
1.8MB
-
MD5
2fb7d4c4ea5ac251385fa52d4900e7ee
-
SHA1
56f2721005397caa45f6a32740f8b9ea960fcacd
-
SHA256
2cfb335c214f4790713d2a880188d4bbb3f946e1f025b555682aedc60a9e7f8a
-
SHA512
b122be7557685b75db622913c3e2322ddebd56c26af28bcdd022931214dce033243a3f164cdb8a226b3b91d3b7dce5d1a4ef57aa4a1df54f7124370138189bd1
-
SSDEEP
24576:qkBXIXXdRkd2VotPFAJM9FeKVTLyiriIrlvi9KiJjzB0BaG7mpFsOqJe0WiT9jTv:qkBqtRq2VfyBTLyuplqDw56FQb8Rj/G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cfb335c214f4790713d2a880188d4bbb3f946e1f025b555682aedc60a9e7f8a
Files
-
2cfb335c214f4790713d2a880188d4bbb3f946e1f025b555682aedc60a9e7f8a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
twiocgwm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kwkkdfox Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE