Static task
static1
Behavioral task
behavioral1
Sample
2f473a286fe4198082151ef50203d04dbf02d5d7f30343c9c644f19171d8644fN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f473a286fe4198082151ef50203d04dbf02d5d7f30343c9c644f19171d8644fN.exe
Resource
win10v2004-20241007-en
General
-
Target
2f473a286fe4198082151ef50203d04dbf02d5d7f30343c9c644f19171d8644fN
-
Size
66KB
-
MD5
a4fc50993fd62222e7ddf697399b58b0
-
SHA1
56068d7ca0e00a3da046822c4f907f65739baa0a
-
SHA256
2f473a286fe4198082151ef50203d04dbf02d5d7f30343c9c644f19171d8644f
-
SHA512
3be069b4fe8610d99bf47cdb620a0d3d926013682023802f33c1e53dd78bdfe616de36a1c02685bf591948c9a62539d81baab2748eaa75ae7d95c657bb759727
-
SSDEEP
1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKv8H8hQhW:NAoglOwvl4ulkP6vghzwYu7vih9GueIk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f473a286fe4198082151ef50203d04dbf02d5d7f30343c9c644f19171d8644fN
Files
-
2f473a286fe4198082151ef50203d04dbf02d5d7f30343c9c644f19171d8644fN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE