Static task
static1
Behavioral task
behavioral1
Sample
4579986544567SK.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4579986544567SK.exe
Resource
win10v2004-20230221-en
General
-
Target
4579986544567SK.exe
-
Size
222KB
-
MD5
03583de9c0aab8903f5033c70ec95121
-
SHA1
24d128bae985a8e0709e4d867510756adbc52d3b
-
SHA256
21bb03f0edc9d1584da0a469bad83726ed17ce463aa2570d1c2ec74b23d22bcf
-
SHA512
c603c421ea4fa6c72338b9796b9b19e0452fcc69be82e376ab909e35c2b04e43922b9eedcfcc5eb7b59b5059689f7482f77e98e836400b64f5184d28c1d31b3c
-
SSDEEP
6144:sQsL+qO8mibCoPxL1GL37oSPs0YJQBfS1apMc4:yO8mPoPxL1GHoStCQBfS1apMc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4579986544567SK.exe
Files
-
4579986544567SK.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ