Static task
static1
Behavioral task
behavioral1
Sample
432cd4a5551d30dfbbd3fc525d018bcb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
432cd4a5551d30dfbbd3fc525d018bcb.exe
Resource
win10v2004-20240226-en
General
-
Target
432cd4a5551d30dfbbd3fc525d018bcb
-
Size
211KB
-
MD5
432cd4a5551d30dfbbd3fc525d018bcb
-
SHA1
3a8f8a6ec6f200ebd22ead4259ca617eb4016001
-
SHA256
965e7cf3071b62098c442129178c92da0234de33b57cb123045b3559bfa953ec
-
SHA512
6905c9f1e62ab6e25cff9d1ee275191e4d782357ed1bbc332c0d0617cbfebde4306818364d6621cff3f0d5fbe35826ebdaf406f5c34bea74b69741b06e6360f0
-
SSDEEP
3072:9k2+LfWgO0xdH4Cjv+tcgBO3jKjOMFwEQIN3C9ISE0qJiNlUdpnlM:G2ngLdH4CHjKjOMFwEQISzqJBpnlM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 432cd4a5551d30dfbbd3fc525d018bcb
Files
-
432cd4a5551d30dfbbd3fc525d018bcb.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 86KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE