Static task
static1
Behavioral task
behavioral1
Sample
si643200.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
si643200.exe
Resource
win10v2004-20230220-en
General
-
Target
si643200.exe.bin
-
Size
136KB
-
MD5
e90f2175b6c1715d3dbd140a07c2df2c
-
SHA1
3b6aa25e9ee7b7011fd5c65923ae16df1337b105
-
SHA256
e264324a1850ad5cba4ef4cb109e9771a024b431430b4af1cae762d5c1239579
-
SHA512
50a5fcabdef32d76adf737f7dfb9b6e4b4025ed54b4432577bdec1c131a90350a9e9e960a4cd6c8ea2e7a7a06cc94a8092f7fdbd555ba3646491bf185b6dce21
-
SSDEEP
1536:y6wZMH3Q0D8/OonK0TkZxr6WNh475MbVVhNf3D7eMvsYgibfbFDKsRF:bwZMH3Tqsr6O41Eb/f3D7eM0YgafJlF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource si643200.exe.bin
Files
-
si643200.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ