Static task
static1
Behavioral task
behavioral1
Sample
c32dffd29f118c7d4eee56e2d8b9d5d321f4983deedb876d431dae67ab30a128.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
c32dffd29f118c7d4eee56e2d8b9d5d321f4983deedb876d431dae67ab30a128.exe
Resource
win11-20240426-en
General
-
Target
c32dffd29f118c7d4eee56e2d8b9d5d321f4983deedb876d431dae67ab30a128
-
Size
1.0MB
-
MD5
2a48319d0714926e8198636a3fae0828
-
SHA1
6ed84280673958c7a41aac3f6820719797e0a632
-
SHA256
c32dffd29f118c7d4eee56e2d8b9d5d321f4983deedb876d431dae67ab30a128
-
SHA512
c689971dbf1272edc87618cd0c4e279d018f19ad0390f4f52e5ec21487fb606219cc5f0bc58c5b7d215a881009334ed9580954ca5b7bfe89c6e07644592b4c1f
-
SSDEEP
24576:P9dNUQFgv1LBrTTjkkuYvCPHsyILO3HCpxlunGe:PrN9GvvrPPC0bLOSpx8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c32dffd29f118c7d4eee56e2d8b9d5d321f4983deedb876d431dae67ab30a128
Files
-
c32dffd29f118c7d4eee56e2d8b9d5d321f4983deedb876d431dae67ab30a128.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 525KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ