Static task
static1
Behavioral task
behavioral1
Sample
23bd471ca6a85ccb1a1719d13c3a57326afcf131a070f35f26ac3eb6ee6ea189.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
23bd471ca6a85ccb1a1719d13c3a57326afcf131a070f35f26ac3eb6ee6ea189.exe
Resource
win10v2004-20230221-en
General
-
Target
23bd471ca6a85ccb1a1719d13c3a57326afcf131a070f35f26ac3eb6ee6ea189
-
Size
113KB
-
MD5
550d2c020b0ec15cbdc2bd7615e6b967
-
SHA1
347b9a683405202f581ef0210e3a544a5715a822
-
SHA256
23bd471ca6a85ccb1a1719d13c3a57326afcf131a070f35f26ac3eb6ee6ea189
-
SHA512
0e320fd7c6d7064769cc01f0d93c340354664e9c882b598ad41e25e4178997eafb1a29e3f46e078c7303b29fa08f7310a162f7338b7b5f85184ff52554ee677a
-
SSDEEP
3072:LQDvyk5f0s6KrgIV7zPl6FmmCFe97MYfhhj0/792zY8//5R:MMKrfv0FT9Jfu92z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23bd471ca6a85ccb1a1719d13c3a57326afcf131a070f35f26ac3eb6ee6ea189
Files
-
23bd471ca6a85ccb1a1719d13c3a57326afcf131a070f35f26ac3eb6ee6ea189.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ