Static task
static1
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20230220-en
General
-
Target
Client-built.exe
-
Size
3.2MB
-
MD5
eb9382065b8fa32749705f3edb13f7fb
-
SHA1
b72d9cf567664b9ff505d74b64e32d92b140568c
-
SHA256
67bf67562d50d4ee1f674649edd66613e2b6d5c91e54a08e6c18ecdca0267489
-
SHA512
38670767429883d35f75993a4c6647fdbd5800e7741a007b01ce109a9e8b1a2ef10475f394f10bbba82f38df4e393504439b5af62802a7b0edb8f48c64384f84
-
SSDEEP
98304:JLv0vnsvdfGQAXvEvwvVVIvmZ3K9vmBKGQ6XJ5/nJpgCW:JLv0vnsvdfGQAXvEvwvVVIvmZ3K9vmBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ