Static task
static1
Behavioral task
behavioral1
Sample
329e48e27fc8d57914146ed9d116ccc583fb4b7ba7d47e33ef09051145f5f988N.exe
Resource
win7-20241023-en
General
-
Target
329e48e27fc8d57914146ed9d116ccc583fb4b7ba7d47e33ef09051145f5f988N
-
Size
574KB
-
MD5
fe01f79aa8cc5c6a8cd400f9db0f50a0
-
SHA1
668a2905ce1eca106c44eff958a296ebb16a5056
-
SHA256
329e48e27fc8d57914146ed9d116ccc583fb4b7ba7d47e33ef09051145f5f988
-
SHA512
cd12879bbac91cc8eb81a5ede01fa73fc4e106023cf62905a535f19b3dabcda253052dea6f2e2beb90b8a63f3b6d75688e27bd59c33d3f533b3318aaa799f9c6
-
SSDEEP
12288:zCyEHAWAdljmJqkC3xMX85FSR2f9A08NIX+Vjwd4G/3z1ET4m3Hdsuby:zFhWAfn22m0eD1GPz8HdxG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 329e48e27fc8d57914146ed9d116ccc583fb4b7ba7d47e33ef09051145f5f988N
Files
-
329e48e27fc8d57914146ed9d116ccc583fb4b7ba7d47e33ef09051145f5f988N.exe windows:4 windows x86 arch:x86
0df34c1618dab2825fbeac9ca290dcb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord697
Sections
.MPRESS1 Size: 568KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE