Static task
static1
Behavioral task
behavioral1
Sample
In.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
In.exe
Resource
win10v2004-20230220-en
General
-
Target
In.exe.bin
-
Size
639KB
-
MD5
d6e0f16cfee6b5c9acd6907a39772e17
-
SHA1
cee93aca3ea268de092969938907434da4e1952f
-
SHA256
64879bdaf4add0db2f52b2cfc4c579b15fa5263601aed7c3aeeb926f0dba1acf
-
SHA512
09ef47977818ef738c8514a09ff5ee7e1e01f5c0209eadb19b0f9d480e75821cc070dae2f7fd5f3d5213d7022e6f5eb5409cd7e55a400c7be1014965edadbb0c
-
SSDEEP
12288:X84SE833GmQ7LnWC+vVK8tIPOySYxnV3y3POPysW:X84wHG77LWCCVKh/SY5VSm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource In.exe.bin
Files
-
In.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 619KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ