Static task
static1
Behavioral task
behavioral1
Sample
423883.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
423883.exe
Resource
win10v2004-20230220-en
General
-
Target
423883.exe
-
Size
712KB
-
MD5
c1a0d16468ab1dbada80e546adb073b0
-
SHA1
05595c8b72d01045b7c09a254399788f7cdf116c
-
SHA256
67aa6dd3cfc208be2bf9bc11b9e2ab4dd59f594653f4f073c8b96b5f5872c286
-
SHA512
3d98f89b4aee3fe0c964f989789908c31c4311b46e7c2b525da83d3ca9bc7421087d1d86711cd92e4e5d2296633180601b442aa2d678c3abf84a7c60c81eb14f
-
SSDEEP
12288:wvV+s1bSQT6tjjdB4zdIu5oM3U6trvo/e3sO7ZMhPYexageGOhrCxNHbM0TOyHL+:wtVyu/31dgyWhPYeglfIm0THLXzK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423883.exe
Files
-
423883.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ