Static task
static1
Behavioral task
behavioral1
Sample
MICROCHIPQFP322-25000.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MICROCHIPQFP322-25000.exe
Resource
win10v2004-20241007-en
General
-
Target
MICROCHIPQFP322-25000.exe
-
Size
620KB
-
MD5
ba060f3ccbb40c96956ee61939944c57
-
SHA1
840f6a8241a4db921713ff2efdbf961216c72ff7
-
SHA256
7d8d238f51adccea0240ec51a8abb78ab4b1fa40a3f856abcc7d372e56a5fe42
-
SHA512
f455c6cab0018824132a5a35daaaba6af70aef3d52a40e336b4de8ae78aee174bc3c1b8c57f74fcbf122b52a813ce664e169c95072f37555c3c3ed004885b224
-
SSDEEP
12288:MaF8kdTrFTFJ3b0pcVYGyRIDOYswSLQLMZg2zRP5cu4FhH610QKhK:M68iJbicVYGxDOp+M/hj4/HwIA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource MICROCHIPQFP322-25000.exe
Files
-
MICROCHIPQFP322-25000.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 607KB - Virtual size: 607KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ