Static task
static1
Behavioral task
behavioral1
Sample
324bf010fe364f4a5af428788eaae33c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
324bf010fe364f4a5af428788eaae33c.exe
Resource
win10v2004-20231222-en
General
-
Target
324bf010fe364f4a5af428788eaae33c
-
Size
1.2MB
-
MD5
324bf010fe364f4a5af428788eaae33c
-
SHA1
15dac66b71d54ecd4810b3fbf46174da30393681
-
SHA256
7bfb41aa8a8c319c705e0d2f20b14b417034c6ce05fd36b417ee4a007bb767c8
-
SHA512
3c3bc9ecfa34ae9a195820262bd5df6eb5d6bbfb48972c0add474580ffcb9b968d3d7d77a029f10798f99611faac828169021b865bb96adcff15ffc089f9f686
-
SSDEEP
12288:fThO0SxGdzYMyWun15//r0tVbAdxdJfW9Tqk58F6IW9J3viQbCpGnCePnnXlpB2e:xS7My5b3WQ63vCwwwIJSdEFm8k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 324bf010fe364f4a5af428788eaae33c
Files
-
324bf010fe364f4a5af428788eaae33c.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 802KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ