Static task
static1
Behavioral task
behavioral1
Sample
HSIFsnN0YhuG0YQ.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HSIFsnN0YhuG0YQ.exe
Resource
win10v2004-20230220-en
General
-
Target
HSIFsnN0YhuG0YQ.exe
-
Size
513KB
-
MD5
18eac976314f6ac1e39e1a61297ec680
-
SHA1
dcaff7f36c7092d849e2634dd26e8e5112386ddd
-
SHA256
9cedcc423c89f58cdef6386a96d9d57237cc0ce9b84622651691ec7e40d1e128
-
SHA512
c3472f6aedc128cb264bc279273f125e35baf09cf1d6e2a9fd2ec509fca5e116193c229f7d51e71db1dd9194023abf3e678690215ed4f3b6e14160b442cb171f
-
SSDEEP
12288:2YSv5rd9ymDtS9yQIiNn8EUorDvTuffDVEQDVnBJoyZMNe:2jFDGyQDNn8EUo3vTuEQBBq2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HSIFsnN0YhuG0YQ.exe
Files
-
HSIFsnN0YhuG0YQ.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 510KB - Virtual size: 510KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ