Static task
static1
Behavioral task
behavioral1
Sample
326f52243db777cc4ec5f6676b823d72e83e8d3cefca89f6fbb125531dc0890c.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
326f52243db777cc4ec5f6676b823d72e83e8d3cefca89f6fbb125531dc0890c.exe
Resource
win10v2004-20240802-en
General
-
Target
326f52243db777cc4ec5f6676b823d72e83e8d3cefca89f6fbb125531dc0890c
-
Size
9.6MB
-
MD5
3b36b592809e2385fccbbc530fe54ee6
-
SHA1
98b53d10e754ceda70f6cc9025efd91963b31592
-
SHA256
326f52243db777cc4ec5f6676b823d72e83e8d3cefca89f6fbb125531dc0890c
-
SHA512
12e102f0f5c9e4b45a895903404c6d9929989e3246149e5226f280179912348a2fb84a03cb21a5d79c2f8294af126a3e730ff4c0eb0976fad110cf927aa686c0
-
SSDEEP
196608:HKiWAwr5ejD8yj3w3AQSGj5J0nBHKYmwAFXil/wpV7d+g:Xos8yj3w3AQS2UnNmwyi6bp5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 326f52243db777cc4ec5f6676b823d72e83e8d3cefca89f6fbb125531dc0890c
Files
-
326f52243db777cc4ec5f6676b823d72e83e8d3cefca89f6fbb125531dc0890c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ