Static task
static1
Behavioral task
behavioral1
Sample
Temp1.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Temp1.exe
Resource
win10v2004-20230621-en
General
-
Target
Temp1.exe
-
Size
375KB
-
MD5
83ccb5c523ac9743f9db41460fe8fcd2
-
SHA1
25b4f65c963cf5c8ddd5e283e337be74d394768c
-
SHA256
f05700c9cb3ee995d0b557716280c9e79c1f68ee6d57ce7a4f87b0ee4433fe29
-
SHA512
8e748c29b7097dcd56f5b7b92d7fcc104d9c11c349f268d258e9b2c6210e2d6bafda2d61b3d97fbe8c2e3b6caffe9b7b995cfee2b3240014029a6775d7af0e99
-
SSDEEP
6144:rvrQtqccMhb9VxU/aido6WXjQ0WU7+OLBOZYJmQs+gvUUudBfa4AtzqJVHnqRkY4:7cEcc69VixU7+OUZYsmAUUui4azq+iv9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Temp1.exe
Files
-
Temp1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ