Static task
static1
Behavioral task
behavioral1
Sample
00323067a7286ad707bab7e31e92a3f0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00323067a7286ad707bab7e31e92a3f0.exe
Resource
win10v2004-20231215-en
General
-
Target
00323067a7286ad707bab7e31e92a3f0
-
Size
25KB
-
MD5
00323067a7286ad707bab7e31e92a3f0
-
SHA1
a2213351e50215e22f25226295afc15006f2c976
-
SHA256
21469950d999f9a26b570317521768abee3e495ebbe4ca182b2fe231b14f7663
-
SHA512
786a747feebf7d17da968851338aa9dd904c96ccb999deba49462d2e3321830cd6973ee2936a48ed8f027c0670fbc66f7225a495417c9025d42557ac030630ca
-
SSDEEP
384:HcS9bYrB84cxTgZPGjJOQEZAUCJUSIT8Oo1+pP0uidF+SIp+2eKgJ75j7HM:2G4cxCP6EZApUZIOI+c+ZeXJDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00323067a7286ad707bab7e31e92a3f0
Files
-
00323067a7286ad707bab7e31e92a3f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehfsw2w3 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1yl.r6gf Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE