Static task
static1
Behavioral task
behavioral1
Sample
d32fe7622829a4c587a4b2ba5aac5a2f81af4ab5670b654b06909df25b751857.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d32fe7622829a4c587a4b2ba5aac5a2f81af4ab5670b654b06909df25b751857.exe
Resource
win10v2004-20250211-en
General
-
Target
d32fe7622829a4c587a4b2ba5aac5a2f81af4ab5670b654b06909df25b751857
-
Size
1.7MB
-
MD5
4de23d52796566c91e0e1cc602a8d426
-
SHA1
0455351d58b83b8fe7ea0a01f2fa2af8266cd8e2
-
SHA256
d32fe7622829a4c587a4b2ba5aac5a2f81af4ab5670b654b06909df25b751857
-
SHA512
7e7a9d41e3f61d0f9ce36f1ba7e0843d5117795ca0689642af9b17978a844af17f7179f75f0e9a58e4cd0c7f16cf82caee329bde5ee3d1853e02db1cfc24faf9
-
SSDEEP
24576:whVG65gt8Dgdc800KNhP6dOxfuiFlM2j95xB5EkpHsT0enqohK0w3uvm8zS1pDln:wDGDagdoFhxJUMeaaw3emiAD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d32fe7622829a4c587a4b2ba5aac5a2f81af4ab5670b654b06909df25b751857
Files
-
d32fe7622829a4c587a4b2ba5aac5a2f81af4ab5670b654b06909df25b751857.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 41KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkmclzfn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dgstbmpk Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE