Static task
static1
Behavioral task
behavioral1
Sample
msbhv07.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
msbhv07.exe
Resource
win10v2004-20230220-en
General
-
Target
msbhv07.exe
-
Size
6.8MB
-
MD5
25623138f6ab8c72ef15615a76b4adbc
-
SHA1
c531e563a6bfcc45c29530190a3e7efb0b51ad41
-
SHA256
5392a4d9dcec99da44ff8338a131c56a874720c3093ffdd81af955bac12cbac4
-
SHA512
4dc73e1ad8858ad817440fc53684d023136e8e006e8adbaa29ac84856383aa8f6c5f669734413180776ac4a333455b1dd9837e7ce6843b56a2f843001c752890
-
SSDEEP
98304:unPKEAkIRwKJV3NpyLV1vo8el6beU706rS96aTL0NHrZo3H4jz8w/9I7UWtzucI:I/QRwKrqXvTQ6O9pTgNtuuz8A5WCc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource msbhv07.exe
Files
-
msbhv07.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ