Static task
static1
Behavioral task
behavioral1
Sample
SA-282339442023.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SA-282339442023.exe
Resource
win10v2004-20230221-en
General
-
Target
SA-282339442023.exe
-
Size
698KB
-
MD5
748b8492f205cc920a421b43dc2d8712
-
SHA1
f89672902f44fef8535583906d3692255bb95572
-
SHA256
2cb7398c7dd9ee95d280bd666f70ec51313bb5760254d33d40ec2e22d53b5206
-
SHA512
2960b3ca2c1bf9f4149051410cff881d9596b1c24ed817c0bb0278bc457442c3b71cdc09a9bd7767731e48c431c499d3ff60494cf310a6769ac091d43474ef12
-
SSDEEP
12288:arjM5uxjcrWsUPEfIifqe8ES2FTLyAuNo+WWjQkwHnt:ar0w2IPEIb9NBXjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SA-282339442023.exe
Files
-
SA-282339442023.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ