Static task
static1
Behavioral task
behavioral1
Sample
32840e92ff85953eb053cbd48e14155f9373064f1e6b991f26c00b541ea884c9.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
32840e92ff85953eb053cbd48e14155f9373064f1e6b991f26c00b541ea884c9.exe
Resource
win11-20240802-en
General
-
Target
32840e92ff85953eb053cbd48e14155f9373064f1e6b991f26c00b541ea884c9
-
Size
1.8MB
-
MD5
2334fe5f8b0e60e4ce8578ed4ef9651f
-
SHA1
36d8fa5d157e49678835a0fb8f6ac2adc652f239
-
SHA256
32840e92ff85953eb053cbd48e14155f9373064f1e6b991f26c00b541ea884c9
-
SHA512
8902d467800358dc7c6243a96fbec56ab619f362160da057fa6c9d7c0321302ae4d8c4cc2507209d070dab2d761519da15fb7d5e7f8e79812eb76627c7a1d1f8
-
SSDEEP
49152:PBifHUv1cxATLZkU5ijQYjAY1FyOgJSS:cWFcQ4AY1DKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 32840e92ff85953eb053cbd48e14155f9373064f1e6b991f26c00b541ea884c9
Files
-
32840e92ff85953eb053cbd48e14155f9373064f1e6b991f26c00b541ea884c9.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
doeipdlg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqynpdwu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE