Static task
static1
Behavioral task
behavioral1
Sample
si270609.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
si270609.exe
Resource
win10v2004-20230220-en
General
-
Target
si270609.exe.bin
-
Size
136KB
-
MD5
d51c6be2d7c927d5bd11e3f409db430a
-
SHA1
4bc44bd420034e803210e88fcd9910b0697d9e03
-
SHA256
17c38c5573b66e8108bb1e979115a5c161809d8bdf92a7f32d0466f917982267
-
SHA512
52a258fc4260bb41e44c2cb6e9a1bc3d7a9e4464260aaf608aac935bedda7ea22872f02fa16cb430b4d6283615e0311a938e53fe3bd2d37e6ca2c546da1dd10c
-
SSDEEP
3072:kH67ujE1Rnym/t4X0x/T0wiYJYgafJlW:kkP/N0wiYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource si270609.exe.bin
Files
-
si270609.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ