Static task
static1
Behavioral task
behavioral1
Sample
532c7a0c73bfccf9e89909609f68ad79.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
532c7a0c73bfccf9e89909609f68ad79.exe
Resource
win10v2004-20231215-en
General
-
Target
532c7a0c73bfccf9e89909609f68ad79
-
Size
6.0MB
-
MD5
532c7a0c73bfccf9e89909609f68ad79
-
SHA1
45f9a8242394e76badb12c94212e919c7bdf3e84
-
SHA256
2b45c7e8855ef079118e8abae1efacf2c8373c486219f244fa2945e7608b0a5b
-
SHA512
31d7876b4f99a92eb6fcae9dfa6786383a6b71e01dbd1e45636eef4055e336829903ee70b5ac2391279058953d2d7a39c87470f5bb6e776acbc6994640ff8bee
-
SSDEEP
98304:z5P6n8jw1EtIxAGJS2BO+sRTnb4BUwo2jyFYw3yS5yOCOt:z5P6n8jU0IAGJiRTnb4Bu2jO3YK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 532c7a0c73bfccf9e89909609f68ad79
Files
-
532c7a0c73bfccf9e89909609f68ad79.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ