Static task
static1
Behavioral task
behavioral1
Sample
c932a22a1586fbcaf04a64b80b82e7339497f2530c6a240c030f3aa19f0f0898N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c932a22a1586fbcaf04a64b80b82e7339497f2530c6a240c030f3aa19f0f0898N.exe
Resource
win10v2004-20240802-en
General
-
Target
c932a22a1586fbcaf04a64b80b82e7339497f2530c6a240c030f3aa19f0f0898N
-
Size
96KB
-
MD5
a789085d10bda7c4762a0370d059d190
-
SHA1
9cdd5e1acecfe89f3b36a61599f08d741b58f499
-
SHA256
c932a22a1586fbcaf04a64b80b82e7339497f2530c6a240c030f3aa19f0f0898
-
SHA512
3439fdc9d0289d480b66ee4d44ef38112ddbaed666d811014f0754d4d756a57e8dcd9499cc0a9153e2e932dab0afb6d1583e19da33c4a761d6a2fbebc9912382
-
SSDEEP
1536:C2UTcEK7+Tkf5MgA8CuSmv74BVcdZ2JVQBKoC/CKniTCvVAva61hLDnePhVsWzRM:C2oKTH7Ht74BVqZ2fQkbn1vVAva63Hem
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c932a22a1586fbcaf04a64b80b82e7339497f2530c6a240c030f3aa19f0f0898N
Files
-
c932a22a1586fbcaf04a64b80b82e7339497f2530c6a240c030f3aa19f0f0898N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ