Static task
static1
Behavioral task
behavioral1
Sample
Awb# 8457108962.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Awb# 8457108962.exe
Resource
win10v2004-20230220-en
General
-
Target
Awb# 8457108962.exe
-
Size
586KB
-
MD5
bf336ccdb32c0945d4c4ae5622daeae9
-
SHA1
6b4e827d3b25271c1b30c33ee32a2371442bf49f
-
SHA256
66b390d754492159e474e9860d5431520b5d674150865a1e61377644a528da6c
-
SHA512
8c72b21f23d70abbe3728c884fa7bb3d582fa070d1816b2cef968305a93c302d69e0364984e8887495ef1856aa7b583fd5c4f6d2dca5016705ac903d5bca6a03
-
SSDEEP
12288:kysS5cSd3JcFNmEFME9J4bkBR/liTY3ynm1g8o:fzwLFME9VL/liTq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Awb# 8457108962.exe
Files
-
Awb# 8457108962.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 578KB - Virtual size: 578KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ