Static task
static1
Behavioral task
behavioral1
Sample
32b84910b4f64947481576fe6f8c2276.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
32b84910b4f64947481576fe6f8c2276.exe
Resource
win10v2004-20231215-en
General
-
Target
32b84910b4f64947481576fe6f8c2276
-
Size
409KB
-
MD5
32b84910b4f64947481576fe6f8c2276
-
SHA1
ea6147b9a7570073b00d5221958857662f616712
-
SHA256
137bdcfbba6273165493e6ffb5899502efe80872941228228dbff206a56e0405
-
SHA512
dc08b8706702903f2f860337eee9d8afe39f94cc305f9bb9466d2e9e89a925f018608860ae9ad38df00a0b320946980d86df8b5b1ef191c2bd8c849c5fa63ebb
-
SSDEEP
12288:VHt3bcrKlSTsK4+t8E1n/YRsWZ7PetQn1lyqW:VO4ST7T1n/YPZKQn1lyqW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32b84910b4f64947481576fe6f8c2276
Files
-
32b84910b4f64947481576fe6f8c2276.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qnk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE