Static task
static1
Behavioral task
behavioral1
Sample
Output.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Output.exe
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
Output.exe
Resource
win10v2004-20230221-en
General
-
Target
Output.exe
-
Size
160KB
-
MD5
11470d4ddc09aef2e2f1d267e769ab01
-
SHA1
471bd5bc159c457d99310300c5721c46391c42b9
-
SHA256
9c256e20d9183fc4b7aa42014223db21c1086ec4ac90d100f7b4d98cc60f68ee
-
SHA512
4f53d0084f3b1db83afbe82882591d0c4026c64edd30e81f11b2a0592571e4fcf740323eb978a74d0940a2063146147c3e57b15339e9cc7c238350028a9e1d73
-
SSDEEP
3072:rp/WlSItg+6kpbx4MIHw5dZtz5h79NR5b:rpBItg+6kpFp621p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Output.exe
Files
-
Output.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ