Static task
static1
Behavioral task
behavioral1
Sample
k3017423.exe
Resource
win7-20230220-en
General
-
Target
k3017423.exe
-
Size
11KB
-
MD5
0df31e592612c7b9443a2a3c2d7e1ed2
-
SHA1
96a137ccb4553c69d41fc29a255f7cd7055b8de1
-
SHA256
67eca8f2bd42b807c1c95101607dbc987a3eda62606576ec4949a359cbd5eb23
-
SHA512
73e37cf417e2a345bc9154cc6f0512a61fed9e9b8e4ded597fb7e64e5d1b75975c5edb88e16974947b84084d9039ba1ae8ae25c2f7b1399c4c5ffb95c27d2935
-
SSDEEP
96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource k3017423.exe
Files
-
k3017423.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ