Static task
static1
Behavioral task
behavioral1
Sample
2e663af8352bcfcccc8fbde252fa6f74cae9ff7cf9fb23f77e64c95e7efee9b8N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e663af8352bcfcccc8fbde252fa6f74cae9ff7cf9fb23f77e64c95e7efee9b8N.exe
Resource
win10v2004-20240802-en
General
-
Target
2e663af8352bcfcccc8fbde252fa6f74cae9ff7cf9fb23f77e64c95e7efee9b8N
-
Size
2.6MB
-
MD5
4ffa79c1a7fc01d5b2cfed06b8bd1760
-
SHA1
f57c86dfbc60858a4dca65c57b54c8a2f1c46cc3
-
SHA256
2e663af8352bcfcccc8fbde252fa6f74cae9ff7cf9fb23f77e64c95e7efee9b8
-
SHA512
ee55ba885ff4f384b2bc289c52c91565151b95fd969e9cb1b001cdc501feea8c910495778c55871fe027691527f848a2615ff7e8e8921566402b7c03c330e4b0
-
SSDEEP
49152:NwQVcAlmQiBSF+aHUUCF9d0vUTz/EfAId0npG7pSYR7T3SjfmVh97TwOEbiJ443R:NwycAlmQiBSF+aHUUCF9d0vUTz/EfAIh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e663af8352bcfcccc8fbde252fa6f74cae9ff7cf9fb23f77e64c95e7efee9b8N
Files
-
2e663af8352bcfcccc8fbde252fa6f74cae9ff7cf9fb23f77e64c95e7efee9b8N.exe windows:4 windows x86 arch:x86
1ff61fe7c9bdb9144bcdc4da3aedb16f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
SetErrorMode
SetConsoleCtrlHandler
SetLastError
GetCommandLineA
RaiseException
GetFileType
ReadFile
GetLastError
SetFilePointer
GetFileAttributesA
Sleep
GetVersionExA
GetLocalTime
GetCurrentProcess
GetProcAddress
LoadLibraryA
SetEndOfFile
VirtualAlloc
VirtualFree
CloseHandle
GetStdHandle
FormatMessageA
DebugBreak
FreeLibrary
GetCurrentThread
GetModuleFileNameA
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetFileInformationByHandle
DeleteFileA
WaitForSingleObject
SetThreadPriority
CreateProcessA
WriteFile
FlushFileBuffers
ExitProcess
TerminateProcess
UnhandledExceptionFilter
HeapFree
HeapAlloc
MultiByteToWideChar
HeapReAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
SetEnvironmentVariableA
SetHandleCount
GetStartupInfoA
GetVersion
GetCPInfo
GetOEMCP
CompareStringA
CompareStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 220KB - Virtual size: 302.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ