Static task
static1
Behavioral task
behavioral1
Sample
03365299.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
03365299.exe
Resource
win10v2004-20230221-en
General
-
Target
03365299.exe
-
Size
813KB
-
MD5
046ed750609f61a01f15f23d2f2ac351
-
SHA1
7e8610871fe78556c6eb8f84591a7363c79b2aeb
-
SHA256
3d318fe7e857edb9267b1b826b71027ad24d9872f8540a707f1e2505a43c95af
-
SHA512
5b2653a08e85c1bdf6f78e080b11966775890de80a63db91057c230fe551ed19cd8514292049f4955203b9e38ac277eada1e3056408d105e792d3f52848d1aa5
-
SSDEEP
12288:r15qeS23r1qwr+foifmYe2EfCGsMVMgHYGCeuz/qSysgt:r1E+1uvf2tlGg4DeayFt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03365299.exe
Files
-
03365299.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 810KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ