Static task
static1
Behavioral task
behavioral1
Sample
2a270773553cfdca5c1fdbf24d44f18c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a270773553cfdca5c1fdbf24d44f18c.exe
Resource
win10v2004-20241007-en
General
-
Target
2a270773553cfdca5c1fdbf24d44f18c.exe
-
Size
226KB
-
MD5
2a270773553cfdca5c1fdbf24d44f18c
-
SHA1
ba5a6399c539f549b519f084c54852b6d434b030
-
SHA256
3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220
-
SHA512
dcb83c9e6325c5944e4eefe865ad95b4560f3e4557c18c9fb7b0ef2d1abfec3bac6bff416efdf3e042e0dcc4302263f57ea1aade22f912ee5d2f0a6a9c223c40
-
SSDEEP
3072:zKEbzkIj9XmBQXzBOY+UhcaPKzyU5NRS8/AZdF+:mEPkIjRmGNOMYz3H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a270773553cfdca5c1fdbf24d44f18c.exe
Files
-
2a270773553cfdca5c1fdbf24d44f18c.exe.exe windows:5 windows x86 arch:x86
aeda2247107ce1cc9c58b0f6c2e9c5f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
SetLocaleInfoA
DeleteVolumeMountPointA
InterlockedDecrement
GetEnvironmentStringsW
GetComputerNameW
GetModuleHandleW
GetDateFormatA
LoadLibraryW
ReadProcessMemory
GetTimeFormatW
GetConsoleAliasW
CreateProcessA
GetAtomNameW
GetStartupInfoW
GetShortPathNameA
SetLastError
GetProcAddress
PulseEvent
SetFileAttributesA
BuildCommDCBW
GetNumaHighestNodeNumber
LoadLibraryA
UnhandledExceptionFilter
InterlockedExchangeAdd
LocalAlloc
AddAtomA
FoldStringW
OpenFileMappingW
RequestWakeupLatency
WriteConsoleOutputAttribute
FindFirstVolumeA
FindAtomW
UnregisterWaitEx
CreateFileA
WriteConsoleW
SearchPathA
GetCommandLineW
MultiByteToWideChar
GetLastError
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapSize
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleA
GetConsoleOutputCP
GetModuleHandleA
user32
GetClassLongW
gdi32
GetBitmapBits
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ