Static task
static1
Behavioral task
behavioral1
Sample
NO-202327.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NO-202327.exe
Resource
win10v2004-20230220-en
General
-
Target
NO-202327.exe.bin
-
Size
899KB
-
MD5
a68bb922b70a9c50bf84e65709819b1a
-
SHA1
960b5cbbd5bb6482f743d819cf7c01a7c361153f
-
SHA256
36092694a2b80c584ba98d16b112b3202847072d164cdf8fdaab5c7fe2d3680c
-
SHA512
fd3c327b1fbbef14554b18bed070f2b2669cb48f20df67fa3887eb63e3a191ab7db0b865faf5e8c8a85db5645a9aeb53b4f2966bcd8fe4a812a239c199dc8376
-
SSDEEP
6144:gqfGIRkap2/SmVAmSSkZ8yz9IQMAtPfQswQUUcfpHK3yRy7hDLL+9cJ16WrHQahY:NKSaAv5z9IG5Uz1y7pLyM5HQaJY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NO-202327.exe.bin
Files
-
NO-202327.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 607KB - Virtual size: 606KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ