Static task
static1
Behavioral task
behavioral1
Sample
09330199.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
09330199.exe
Resource
win10v2004-20230221-en
General
-
Target
09330199.exe
-
Size
153KB
-
MD5
e72d96cbb3ced2904f29677c7abb3e57
-
SHA1
259ce8c2ce18835f1519a4564f72fa1974ba4a36
-
SHA256
ed5609556f3d4f46e893392c4f80e145811484d42fc104345ace0d5ef0d11a6a
-
SHA512
881b9ed4f2cac6482a734a57d35604928dd17796ccc7c43c9a33ec0fc0bc0fb481f4aca57f8bd7a50b4ca4dc0cf152504b11a426c8a469150e2bf6cfa7c6c1b5
-
SSDEEP
768:7T8g6SmLdHaPNITknbA7qhaF5YhqkEC2wfK6rl:7Tj6SEkNIgbAesnc6Hu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09330199.exe
Files
-
09330199.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ