Static task
static1
Behavioral task
behavioral1
Sample
2f6bedd1c1af2de48466a8900480d3c33f2ed45ae0b20e25833332a7109270ffN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f6bedd1c1af2de48466a8900480d3c33f2ed45ae0b20e25833332a7109270ffN.exe
Resource
win10v2004-20240802-en
General
-
Target
2f6bedd1c1af2de48466a8900480d3c33f2ed45ae0b20e25833332a7109270ffN.exe
-
Size
97KB
-
MD5
eead6b9f8accec25013c3b6eec072250
-
SHA1
5b08910b68837040f0366fe2e41d29a758e46bd5
-
SHA256
2f6bedd1c1af2de48466a8900480d3c33f2ed45ae0b20e25833332a7109270ff
-
SHA512
e258712b0991814eed1cb2d6be836481182b9028d6d5ede6af3f07a52e343fb8ea8a8fc763b48f688408942397eb3553baaa5015d3a5b6892f3ea9a5ea806ec8
-
SSDEEP
768:Xjb5ijtnOsdPATtlv8edbnTsEj2MPHBPrq6yG2lsLvdO6ea:X3CnLGTtlv9d0EimHBNyG2lId1ea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f6bedd1c1af2de48466a8900480d3c33f2ed45ae0b20e25833332a7109270ffN.exe
Files
-
2f6bedd1c1af2de48466a8900480d3c33f2ed45ae0b20e25833332a7109270ffN.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE