Static task
static1
Behavioral task
behavioral1
Sample
rIMG-20230601-WA0004470000000400000000002023.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rIMG-20230601-WA0004470000000400000000002023.exe
Resource
win10v2004-20230220-en
General
-
Target
rIMG-20230601-WA0004470000000400000000002023.exe
-
Size
19KB
-
MD5
c2da4c9371267f50a58910e83443f4e9
-
SHA1
d025ea0ac12cfcb908974a657a6851510b456010
-
SHA256
fc70cef3f51f8b5e650acd5afa66201338493dd97c709db8aba538952f76759e
-
SHA512
3f0f2860387fe1bec3c895f16cd9348cd54b8c6b0e5f4009bf80b2a6779213bf6334ee92f165e6e8f1c96e4ffa0cc0b9e4062fc3d35bdd19ec8fc78951da7720
-
SSDEEP
192:nW079F5mhDfvHmdsBPbcY5/XMUYaDPEnxEBkyWIka258Fq+DqBMi7t9ZcE/WtplM:WIGfPmoR3DdBX9ka2i5kMkt9y3DHixH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rIMG-20230601-WA0004470000000400000000002023.exe
Files
-
rIMG-20230601-WA0004470000000400000000002023.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ