Static task
static1
Behavioral task
behavioral1
Sample
b22d8fdd97f45f4dfdd1bfb3ffebbd4e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b22d8fdd97f45f4dfdd1bfb3ffebbd4e.exe
Resource
win10v2004-20230220-en
General
-
Target
b22d8fdd97f45f4dfdd1bfb3ffebbd4e.exe
-
Size
652KB
-
MD5
b22d8fdd97f45f4dfdd1bfb3ffebbd4e
-
SHA1
8e795a42ef5eac5a161c8cea9008f1fd07f342a9
-
SHA256
f02eb95bab7a8ecdc3b8d757c3132176f1a172161a999c3eaf15ed2ab3bc75f0
-
SHA512
1b2ead364470562e7e0152065e3caedcd2d09db11458515f4ade2592cfecfdb8876a89231f544dad05a622f0c1f21b80112b5627c25ac52c089f1b537e861d35
-
SSDEEP
12288:fu+J/M+Jhewx/NscEQ+vgXK1HsaPTMf8d+Bjpt2WN4Ej8GHamX3Qv+J:f3/thewlqB6p8Mf3xptd8G6mX3/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b22d8fdd97f45f4dfdd1bfb3ffebbd4e.exe
Files
-
b22d8fdd97f45f4dfdd1bfb3ffebbd4e.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ