Static task
static1
Behavioral task
behavioral1
Sample
8bf173aff4199d406af58097f9a02434.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8bf173aff4199d406af58097f9a02434.exe
Resource
win10v2004-20230221-en
General
-
Target
8bf173aff4199d406af58097f9a02434.bin
-
Size
727KB
-
MD5
8bf173aff4199d406af58097f9a02434
-
SHA1
95bf3e1a2ba4c7b7992e4aa7e3291fca187b50a8
-
SHA256
ed9248192c85ed4a3053e0c5bf1763cb1e39ed9514122a29542e439461c89f9b
-
SHA512
ff3436ff08dd861b8868f996e548337ef5b644fe3e2dbb007e925fda6f26740382c81e01d19ba7dc8387ed594a3c0bf408f8e535e0874a4783fed85fa9a16b65
-
SSDEEP
12288:vf1Z6SljSn+1fyjVsjQbM+AqVX5zspuvwQ:n1Z5PfyjG8I+PzYKwQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bf173aff4199d406af58097f9a02434.bin
Files
-
8bf173aff4199d406af58097f9a02434.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 722KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ