Static task
static1
Behavioral task
behavioral1
Sample
3b32ac42f14c66d6bb330f4e011ea762.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b32ac42f14c66d6bb330f4e011ea762.exe
Resource
win10v2004-20231215-en
General
-
Target
3b32ac42f14c66d6bb330f4e011ea762
-
Size
72KB
-
MD5
3b32ac42f14c66d6bb330f4e011ea762
-
SHA1
1fa7e7bcd581e86cca2d242174a36f14d9d31c9c
-
SHA256
21d219fc3b11726e8695d7d4e54c2ac7b794c0c99edf49c4f9fc2aa8afe3d002
-
SHA512
9458610017f49feab9afed36aba0bf23170afe4f80a72aa73cba5aa15c5cc48de69594c544af82a365ff9484a115ad41473b49022cf78e60f852f20e76eb79b6
-
SSDEEP
1536:+VNEfxvOYM9zqqYyIow2MJCZ7iqHWWzpatef6O0+DZFT+eP6TfXkcOalSJpYwTLy:UE9lwdYyIow2MJCZ7idewtUY+fT+eP2P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b32ac42f14c66d6bb330f4e011ea762
Files
-
3b32ac42f14c66d6bb330f4e011ea762.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 46KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE