Static task
static1
Behavioral task
behavioral1
Sample
09131099.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
09131099.exe
Resource
win10v2004-20230220-en
General
-
Target
09131099.exe
-
Size
809KB
-
MD5
942a1420b3a4684fc08935db9e29c4a6
-
SHA1
35c8b99eb2c4f2a7083f6f08bb636689dbd550e0
-
SHA256
aca520ab30a0d4615d12830ed8633aa83595fd6eb3bfccafa9ddbbc2dd4db547
-
SHA512
050b1dd289815961fcf2bd502c263233259b2a938a3445e8bbdea909b95ded954f20d20c43e231387bc1a41f7a09f33396e3f05fd9952da98d198e3af97d5a7a
-
SSDEEP
12288:8xV3p7k08l09QuHVOGN3n8tQf2AiBzB2K5fN88bwWsj:8xV3p78l8VHVdN3IQfiMGRtk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09131099.exe
Files
-
09131099.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 801KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ