Static task
static1
Behavioral task
behavioral1
Sample
32aa63d6e277ee3432422d80c1e60990.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
32aa63d6e277ee3432422d80c1e60990.exe
Resource
win10v2004-20231222-en
General
-
Target
32aa63d6e277ee3432422d80c1e60990
-
Size
159KB
-
MD5
32aa63d6e277ee3432422d80c1e60990
-
SHA1
89f510b5122640d5ae32ca0e444929ff591c48a2
-
SHA256
e736ea5e890a7f7441c03de472b61dde39ecf410a3577837828bb4123a7a4bd8
-
SHA512
6beefe5411eb3de1a67b7571358c2e94f701348dc2ffdc6d91fdfa4028b94d2ca6d7a432c5cd40feb9da3477b92e207b4d684cf1dd009babecd7f39dbee6a7ed
-
SSDEEP
3072:tOuHYCOYKFHJfLT87ZBAndyslsClKMnldV0pl6Fac7WQuV4ZhynG:4kYFYaZVMClKMn15qCDY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32aa63d6e277ee3432422d80c1e60990
Files
-
32aa63d6e277ee3432422d80c1e60990.exe windows:4 windows x86 arch:x86
9f066560f796c95a8acb8f34392f7a7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTapeStatus
VirtualAlloc
GetProfileStringA
GetUserDefaultLangID
ClearCommBreak
GlobalFlags
GlobalFree
GlobalLock
CreateHardLinkA
GetOEMCP
CreateJobSet
GetProcessHeap
CloseHandle
GetStdHandle
ExitProcess
GetModuleHandleA
GetCommState
GlobalCompact
EnterCriticalSection
FindAtomA
FormatMessageA
user32
GetFocus
GetDC
GetForegroundWindow
ReleaseDC
GetParent
ShowWindow
IsIconic
GetWindowTextLengthA
GetClassNameA
GetActiveWindow
RegisterClassA
GetWindowTextA
GetClassInfoExA
EndPaint
ValidateRect
CloseWindow
BeginPaint
DrawEdge
GetWindow
wsock32
WSAGetLastError
WSAStartup
WSAIsBlocking
WSAAsyncSelect
WSACleanup
dot3api
Dot3SetProfile
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ