Static task
static1
Behavioral task
behavioral1
Sample
UktzFRSFxM46kdM.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
UktzFRSFxM46kdM.exe
Resource
win10v2004-20230220-en
General
-
Target
UktzFRSFxM46kdM.exe
-
Size
783KB
-
MD5
99ff0bb3b61759a56dfd2d87c5287955
-
SHA1
2584eaa31d5560d06e374b2e88b9cb3acd70121c
-
SHA256
108ad52223146f11df1f746b5b2fa805905c183d0fab1ed35cabaa0226df91de
-
SHA512
22d842aecf2ab19475069229ea587e63deabc0b3970fa12c984e9ac75fc097c31c4f52b2829cfffcd766046e57b6877fea2f49d853197654fd639a32ba8dafb1
-
SSDEEP
12288:jWd/gchqZfOtXy1zDSMh41RXWC5sl+UCFVX1BDRsCpM3ocmjp:jgggIqXIDSMy1NB5pUCbXTDKCpM4TV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource UktzFRSFxM46kdM.exe
Files
-
UktzFRSFxM46kdM.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 750KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ