Static task
static1
Behavioral task
behavioral1
Sample
32606e68fe032b4f2db9d008c83e8caa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
32606e68fe032b4f2db9d008c83e8caa.exe
Resource
win10v2004-20231215-en
General
-
Target
32606e68fe032b4f2db9d008c83e8caa
-
Size
92KB
-
MD5
32606e68fe032b4f2db9d008c83e8caa
-
SHA1
e649aa826fe8d167ec9e39dc74f3029e81e392c0
-
SHA256
75ef2b9dc6a0ecd92517a50a3ed21534de4c0d93e891201f9ccea175bc6e090e
-
SHA512
c90fa13055577583b7ffcdd40af92d23edf00beecea4d00e0c7992431da38fd52447329e9ed0deaeddece0353cf2b58868ab6f9db38697e145e44303f8b96a02
-
SSDEEP
1536:NSquE20GQkUR0/fTcv67PV2FI0XrzwxjnlOsMtkuX5ZlSua/BOU11EZ7tp8/Bxm:qTIAt2FI0GXKkq5ZYF/ACiZ8/Bc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32606e68fe032b4f2db9d008c83e8caa
Files
-
32606e68fe032b4f2db9d008c83e8caa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ