Static task
static1
Behavioral task
behavioral1
Sample
APPConfig.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
APPConfig.exe
Resource
win10v2004-20230220-en
General
-
Target
APPConfig.exe
-
Size
170KB
-
MD5
17f037e4105aaf3afbc652ab0a149e72
-
SHA1
19d23f242b14bf0dadefcb1a5c2caf55380c5184
-
SHA256
111c5afd71012c3295e2eb483e06fba7b9b3dc12c6d7645e1406787f120fe8ac
-
SHA512
446992b46ea6765b6b78202f6debb3a00b9f97353dda34742cd5d25ff24c3a5a7186598beeb96e5141f8476ae54b6d026175c0f31b9e6a210892ea5522beaf5c
-
SSDEEP
1536:UoL1Ujx/eyctDGCH0tuoc9XFjrZv8EfvBtWn4HrtQSBgoHfa:Uouj0y6DGCH0thq1Jv8EhimrywDfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource APPConfig.exe
Files
-
APPConfig.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ