Static task
static1
Behavioral task
behavioral1
Sample
322a991cf91472f692e770b353505a70N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
322a991cf91472f692e770b353505a70N.exe
Resource
win10v2004-20240802-en
General
-
Target
322a991cf91472f692e770b353505a70N
-
Size
488KB
-
MD5
322a991cf91472f692e770b353505a70
-
SHA1
6214ae4416d14690e0c8771cd28d3c63eebc976a
-
SHA256
79f71f0c96c09ab512f0edea3eb6663699762f73140855f52a71acc074f3071b
-
SHA512
957a6b6a7e5627af22a78af50b1db71422090a9d3e20a22ab14d2aadafbfb9baf2edfd8ec207c2d65c5e711ae0d893274b9a325fd37abacd4ecd887c7ca48fdd
-
SSDEEP
6144:kIkWcDpi78KSrafqV5areuyFwB+XN/O8OCLg/iJdkphYKAMsye8sRmKE+/4Z:kIlc87eqqV5e+wBoO+46tWeFEPZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 322a991cf91472f692e770b353505a70N
Files
-
322a991cf91472f692e770b353505a70N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE