Static task
static1
Behavioral task
behavioral1
Sample
08580099.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
08580099.exe
Resource
win10v2004-20230220-en
General
-
Target
08580099.exe
-
Size
609KB
-
MD5
f182322cb91f963ce47d4d920250f8a5
-
SHA1
b9d94a757ac9ee5c0f26fa5bb05b238154958edd
-
SHA256
555619f346c2977ec91ee4274f03d42a4a1e800d6b70c67d85b17e446e6ba365
-
SHA512
fa71b7e4aa45127c4565a5fa08274e82446d1219e29ddaa4e9d193a39bc8cf43e4cfe7dc4b3d5c1b32844c8249f2d09df94049f67ecafca2b5ef695c769d5d16
-
SSDEEP
12288:n7z5GoJiGaq5autM0NkmDGWP0lKSlRDFbGt9CjYE:v5GoR5azRmDfSfDF49C8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08580099.exe
Files
-
08580099.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 600KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ