Static task
static1
Behavioral task
behavioral1
Sample
SFX.exe
Resource
win7-20230220-en
General
-
Target
SFX.exe
-
Size
180KB
-
MD5
9d2e1a7c7ffe298bd5d8ad7dbde23479
-
SHA1
07f9f56646da1d7a1ef9c89c05732a8efa13d216
-
SHA256
d15393560f3366bf8e1cc8d9eca6e5bfb5a35e26d7217e4470fd121bb12d6ab7
-
SHA512
06fb4ace9eee44426a473a80f60e3fd0b9cd6ca1f696f39ef8486da21613bfdd5e722e8e3b03bf3c5fd726ae7009000692e4cab37c8cd71dfcf5070628a8a578
-
SSDEEP
3072:zeOMawcjtdQs5ibI8TmXcp5gy9IKL2kqsEcu2M4S/xaJVYYPwtz:zeJktdQs5I96Xcp5M2WsE72e/xowt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SFX.exe
Files
-
SFX.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ