Static task
static1
Behavioral task
behavioral1
Sample
32d0b271209a159c5b5301c9fd4e83dedd2f3f77ac3718d62016deed8c9f328c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
32d0b271209a159c5b5301c9fd4e83dedd2f3f77ac3718d62016deed8c9f328c.exe
Resource
win10v2004-20240226-en
General
-
Target
32d0b271209a159c5b5301c9fd4e83dedd2f3f77ac3718d62016deed8c9f328c
-
Size
2.4MB
-
MD5
306dd332c78fb016e9642fac83987eb2
-
SHA1
9bb080010e3ff4f93bcda66ec8c8542ba1d229a5
-
SHA256
32d0b271209a159c5b5301c9fd4e83dedd2f3f77ac3718d62016deed8c9f328c
-
SHA512
d03b5d70d7917d3a88b4eb89d02da058b71c5a7cc77a5290971cc7a1fed130cc91306224bccf8ff3b0577454899386107e831cc873a3be9bbaec7dc4356e0879
-
SSDEEP
49152:g6BmqqALtZtnrtd/nYBg5ntcPLp4Nr2kSFKeuJttxPoeJNZ7bdsnVFUVF:g6BmqqALJnrTvYBgCjAr2bVkttxgW/75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32d0b271209a159c5b5301c9fd4e83dedd2f3f77ac3718d62016deed8c9f328c
Files
-
32d0b271209a159c5b5301c9fd4e83dedd2f3f77ac3718d62016deed8c9f328c.exe windows:5 windows x86 arch:x86
863ab48aed8c5c5f9dadd7250781275d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
gdiplus
GdipFree
iocptcp
TcpSend
iocpudp
UdpInit
user32
GetDC
gdi32
SaveDC
comdlg32
GetFileTitleA
advapi32
FreeSid
shell32
DragFinish
ole32
CoInitialize
oleaut32
SysFreeString
disklessmultiserver
InitMultiSvr
ws2_32
htonl
iphlpapi
SendARP
version
VerQueryValueA
crypt32
CryptMsgClose
wintrust
WinVerifyTrust
rpcrt4
UuidCreate
imm32
ImmGetContext
comctl32
ord17
dbghelp
MiniDumpWriteDump
shlwapi
PathIsUNCA
wininet
InternetOpenA
psapi
GetProcessMemoryInfo
winhttp
WinHttpOpen
Sections
.MPRESS1 Size: 2.1MB - Virtual size: 15.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE