Static task
static1
Behavioral task
behavioral1
Sample
432d49d251b458acfac00e0a7ba4c598.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
432d49d251b458acfac00e0a7ba4c598.exe
Resource
win10v2004-20231222-en
General
-
Target
432d49d251b458acfac00e0a7ba4c598
-
Size
2.2MB
-
MD5
432d49d251b458acfac00e0a7ba4c598
-
SHA1
886bc5f885027a5ccdb27b6e118a532f75c53335
-
SHA256
b23ca5317b3b651a96c959cb84a838873d0a4cfb4881579c8636cd324b320a84
-
SHA512
86757891f939ee510df286090bb4f0be07a1808e76f1cca8a8c3e5483c014b584352e5f699ed06cb85a8ca2c1101299903d23b18b1580a7c921913bdc9823ed4
-
SSDEEP
49152:RUKE8VzbEBiNTU0/ZL3wsFdjqJC7w1x2fpTzyEF:KKvNYANTqbC0SfFzdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 432d49d251b458acfac00e0a7ba4c598
Files
-
432d49d251b458acfac00e0a7ba4c598.exe windows:4 windows
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 187KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mjiadyah Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vwbftibh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE