Static task
static1
Behavioral task
behavioral1
Sample
436afd95070401c45c958214b9bf6c67.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
436afd95070401c45c958214b9bf6c67.exe
Resource
win10v2004-20230220-en
General
-
Target
436afd95070401c45c958214b9bf6c67.exe
-
Size
597KB
-
MD5
436afd95070401c45c958214b9bf6c67
-
SHA1
f980914192d56abbd39691307a85e3f0faf3cdbc
-
SHA256
94301a0bdd439668bb98c0dd4575a134b4e189bba14a882a3d7e04f6ad8e2865
-
SHA512
d55af2e89d1131783d7743813eec4273b9e0a4812bedfe0d2c6a9956b7b83eee5fe88739ad95975abcf2ecacf8378412f58d82b56b9ca2c6a941d016830e2579
-
SSDEEP
12288:M35mzZBEP85zXpTURESsyhHH+K5nct5XniZk98gJ1rja4Kaq:v9BEP8VXtoES7HecnU5XoHgJ1rd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436afd95070401c45c958214b9bf6c67.exe
Files
-
436afd95070401c45c958214b9bf6c67.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 595KB - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ