Static task
static1
Behavioral task
behavioral1
Sample
Img20230526_09173020.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Img20230526_09173020.exe
Resource
win10v2004-20230703-en
General
-
Target
Img20230526_09173020.tar.7z
-
Size
423KB
-
MD5
941734e4adf9b38559b784738780529c
-
SHA1
67a4f87cc5b07ab58f3be1528df1a002136bd5dc
-
SHA256
0ebaf9f2aa570e5caa39d673bca5bd556c87b7ac4de3101688e39d6eb5640e68
-
SHA512
9f11e109022c13292acd1eacc093ee47763da1bff83383a33691782b0cc8c84f5fd4ac03d5ce1919af7b337875cd482130c0ead3fd059099a3a77934dfb56fba
-
SSDEEP
12288:UiATLWm8mQfYGL0IaKJgCecwu7w/wfqVMi:UiWLr8mQfRLV1etuQei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Img20230526_09173020.exe
Files
-
Img20230526_09173020.tar.7z.7z
-
Img20230526_09173020.tar.tar
-
Img20230526_09173020.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 618KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ