Static task
static1
Behavioral task
behavioral1
Sample
8A279783229E688A2324C224904473431CC5CAB7E6B85.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8A279783229E688A2324C224904473431CC5CAB7E6B85.exe
Resource
win10v2004-20230220-en
General
-
Target
8A279783229E688A2324C224904473431CC5CAB7E6B85.exe.bin
-
Size
466KB
-
MD5
2d8f60c9459f321d765ce1e50e49f41a
-
SHA1
15797084c07f8ce0ef427fd868a81ab95b10f549
-
SHA256
8a279783229e688a2324c224904473431cc5cab7e6b8538ac8256877cfd58384
-
SHA512
c076c9588d48ded127c753d8d5e9d321535111042f97c286dc41711af86d02beeeec28b6a08de1d413462d9a5c7b4d20981d1327a5ecc4a5e04dba7edbb72b70
-
SSDEEP
12288:jHZKdRVIZcXwxHr7ypW4eSs1k2s5YqK7:FumcXg7aeSsQY9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8A279783229E688A2324C224904473431CC5CAB7E6B85.exe.bin
Files
-
8A279783229E688A2324C224904473431CC5CAB7E6B85.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 341KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ