Static task
static1
Behavioral task
behavioral1
Sample
326b1d52f4a5c34a60343c4de119fe4b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
326b1d52f4a5c34a60343c4de119fe4b.exe
Resource
win10v2004-20231222-en
General
-
Target
326b1d52f4a5c34a60343c4de119fe4b
-
Size
256KB
-
MD5
326b1d52f4a5c34a60343c4de119fe4b
-
SHA1
6cdda7fa272d5bbdbda9df565e7d0c88a886118d
-
SHA256
1d5821ca8ef3895fd9d60369d6e72d7ebb5fd17cd0ee6067055170bf169b8a09
-
SHA512
349faeeb1213ddcd024114d6c7dc2a0ec795130826799b0afe177f82845670cee698fdbf7adf7651038eddb6a6f91a9b10e7e6ce7d4ab5b8ea2f40023733ad98
-
SSDEEP
6144:gm3Cd/da+bw0zIpqFPmJ5pQYiuEBr/u+GXZsjmgfssv5U:PsblkpumJXQYixh5QSrNvu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 326b1d52f4a5c34a60343c4de119fe4b
Files
-
326b1d52f4a5c34a60343c4de119fe4b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 515KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE