Static task
static1
Behavioral task
behavioral1
Sample
4332352aa324dbf5df937ffff7d49c17.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4332352aa324dbf5df937ffff7d49c17.exe
Resource
win10v2004-20231215-en
General
-
Target
4332352aa324dbf5df937ffff7d49c17
-
Size
1.2MB
-
MD5
4332352aa324dbf5df937ffff7d49c17
-
SHA1
d68f75b7aa04e8643868f443b35d905810299728
-
SHA256
1b641466426838c10efce945811a9295e9fce1d659feb04d432eb8b2c8e63830
-
SHA512
ec0a04a2d9091ae8822013a0eadb23af9d86b345eb8b42a16cc67089e7203be1b0ec902f2ba3eb570a72a4742107dd3193bcb70a4233128874cf6dfab309a85d
-
SSDEEP
24576:wQQQ3rP/piMCGkYfAShsIr/OwZvATbYESk2D6S8:k2Dk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4332352aa324dbf5df937ffff7d49c17
Files
-
4332352aa324dbf5df937ffff7d49c17.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ