Static task
static1
Behavioral task
behavioral1
Sample
732b2c8a00cb58b7e0ff8a7c9d8ee8e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
732b2c8a00cb58b7e0ff8a7c9d8ee8e9.exe
Resource
win10v2004-20231215-en
General
-
Target
732b2c8a00cb58b7e0ff8a7c9d8ee8e9
-
Size
132KB
-
MD5
732b2c8a00cb58b7e0ff8a7c9d8ee8e9
-
SHA1
53e815229055541c26c9c0a633a441b665455ba3
-
SHA256
d5a3b16425e8083f2963ca8eb436f47ac2a3015a62de3214f8c8ea448cb6e6bf
-
SHA512
0aefa308a5b9e960a2474e4e2d221f75b8b42011d25ed7eee28d6d9d0b9e6e35de63e8ae2afbc36fce833be0c41a765650d3faa1c018a5980e6f3b94238f05a3
-
SSDEEP
3072:NkaG1QancpDLjEMTxZtevRZsm8VQ0LjqwzMaFgca77TVBlmY6I:YHcpPt+3uqW4/TVBla
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 732b2c8a00cb58b7e0ff8a7c9d8ee8e9
Files
-
732b2c8a00cb58b7e0ff8a7c9d8ee8e9.exe windows:4 windows x86 arch:x86
c1350c23f998470d052d2362f2682321
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
WritePrivateProfileStructA
SetFileApisToOEM
GetCommProperties
SetErrorMode
CreateTapePartition
CancelTimerQueueTimer
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
data Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ