Behavioral task
behavioral1
Sample
mwsi.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
mwsi.exe
Resource
win10v2004-20230703-en
General
-
Target
mwsi.exe
-
Size
1.2MB
-
MD5
be00b83e8c0eb0b1f197eed81fe28cb6
-
SHA1
32acd7a228daed0abe1adf69cab886223c9b428f
-
SHA256
b5d27b3ed09da83bd6db83d2feaf2e620de0c2bf41b5d2fde8176c150be26e50
-
SHA512
7d0880519880d193a0e53d1bf4224d956568b5732951ae23946a9d7f6187a346943c0dc41ab1ba6c51940f62ad77da92b9cb194b910a0157c924ae411d85f36c
-
SSDEEP
24576:O3cv5j5ZL6yR/AzRV/Oc1YE+u4yjAiEwc0ogLqEDw5xw6DUiQ/Xh9Wo3C9m:O3K5/OO/AzRV/Oi+UUlwc0oMLDswG+P9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mwsi.exe
Files
-
mwsi.exe.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE