Static task
static1
Behavioral task
behavioral1
Sample
c2d1bbfceaf0c4429b3d5497215ee6f5a66af40b461df2f2532f2406f2f5e0d2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c2d1bbfceaf0c4429b3d5497215ee6f5a66af40b461df2f2532f2406f2f5e0d2.exe
Resource
win10v2004-20241007-en
General
-
Target
c2d1bbfceaf0c4429b3d5497215ee6f5a66af40b461df2f2532f2406f2f5e0d2
-
Size
1.3MB
-
MD5
6250a4e8bd08512d2d3434c0801c0f64
-
SHA1
e004a6918fa85dc11b91b451d451e870887f25b4
-
SHA256
c2d1bbfceaf0c4429b3d5497215ee6f5a66af40b461df2f2532f2406f2f5e0d2
-
SHA512
8e99363b2cc08ef56993ebc83e0f0f18b6723909bed242832d46211a1061f9248937e45ce0d1ee15d5c80f78c8dafb42396a3597c5f148a6068ae40985e35dae
-
SSDEEP
24576:T6VSj50UyoE58rpKyP9gYQaH7+fB99K/cRgOnmq9g6omeC:Tv6fmtKOQXfB9mcOU7m6omeC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2d1bbfceaf0c4429b3d5497215ee6f5a66af40b461df2f2532f2406f2f5e0d2
Files
-
c2d1bbfceaf0c4429b3d5497215ee6f5a66af40b461df2f2532f2406f2f5e0d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 573KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 727KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE