Static task
static1
Behavioral task
behavioral1
Sample
unins000.exe
Resource
win7-20230621-en
General
-
Target
unins000.exe
-
Size
120KB
-
MD5
fedc44d49ac077434621ed7b00e9233f
-
SHA1
6ce87223da9aa55e9695be288712b04612c8a981
-
SHA256
9f60fbfc28e3875762e45a63f9e3ce5dc6b993fe930b2b2f26ba999bd334668e
-
SHA512
79622da4e20d655d36bbaa5936cde110300edccd876decf20c679b567542330541eedf330e6f1ffab4d824d3f9cf073f6e02f3cc75e62c29c0b1893a902e0bb0
-
SSDEEP
3072:t+IH9U8Hp2k9VNq7OA23/RcY1CYS9B3pr8L4dOE:5imdNq7Oj3/K+S93O4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unins000.exe
Files
-
unins000.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ