Static task
static1
Behavioral task
behavioral1
Sample
CSID 270883.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
CSID 270883.exe
Resource
win10v2004-20230621-en
General
-
Target
CSID 270883.7z
-
Size
477KB
-
MD5
590212d15463e5e0c2085dd5d9671797
-
SHA1
6480f7e8b34b37465055165b0d4c9bafd3a7385d
-
SHA256
ee107422042138c607247628f16768ba6b6238c4e5b4d29f80f9e82202836c56
-
SHA512
88df136f67aa124db6af4201a86043393d3216110564abe1e4a9871964ca587bfb5301beb7d7bd269687030c39defbcea7bc2c953f64e069317d228ef6ca9bdf
-
SSDEEP
6144:BR52ZmRbSuVcllTfqV9wQyKnnbr33IqY4cuV8/angQSrhs39km5GUcEyVdZ0qJTp:D52mRbdallTfA7q4bVIaTmhQ5clHeqVp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CSID 270883.exe
Files
-
CSID 270883.7z.7z
-
CSID 270883.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 571KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ