Static task
static1
Behavioral task
behavioral1
Sample
325f1b4e6195327e39ecc2553add0e40N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
325f1b4e6195327e39ecc2553add0e40N.exe
Resource
win10v2004-20240802-en
General
-
Target
325f1b4e6195327e39ecc2553add0e40N.exe
-
Size
65KB
-
MD5
325f1b4e6195327e39ecc2553add0e40
-
SHA1
da6a4f740bbbc1be0351a9d1c288973a3e028edf
-
SHA256
c3bd61acc50adb32ac88edd7253ceccf7d79899d46fa308067750c8274831f1f
-
SHA512
e6f23fa3a796cf8b11457ceda9a22cabd46c3ed5f9de10c41835ce280da7341f68a6946e071790470afdb3be4da1cc3f485f80fd33f31e36e03d93419d7022f6
-
SSDEEP
1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbRJhHhLhIp:lAo1lOwvlKlXBP6vghzwYu7vih9GueIT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 325f1b4e6195327e39ecc2553add0e40N.exe
Files
-
325f1b4e6195327e39ecc2553add0e40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE