Static task
static1
Behavioral task
behavioral1
Sample
Code Scanner.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Code Scanner.exe
Resource
win10v2004-20230703-en
General
-
Target
Code Scanner.exe
-
Size
637KB
-
MD5
81cb0c4cc4f4dabd19748c61e24d7360
-
SHA1
f601521b5bda20f5648638647709cc46ffece836
-
SHA256
46aadca20be6e756d16a227e4f5b4d31a202f5a2205774b97cd6db4d03ba58a6
-
SHA512
9a34e8a78014a51cabf1a8478cff1d201d9514ed40ac613c6a5dc5ebf7440299a132270e2cbcfb18484266133bef84a6ad5c02cb71231cb4037f922f5ac79508
-
SSDEEP
6144:5+spMMP0N9d63V1q4ocTNSiIem91P3JgWDUpNSiIem91P3JgWDUg8:5+CNBWiW4bNBWiW4x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Code Scanner.exe
Files
-
Code Scanner.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ