Static task
static1
Behavioral task
behavioral1
Sample
recogniizerespond.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
recogniizerespond.exe
Resource
win10v2004-20230703-en
General
-
Target
recogniizerespond.exe
-
Size
6KB
-
MD5
cd8871e20db07782e8851e7afb30ba2d
-
SHA1
397d319da3659c32ce2ae79312c6a3fceaf79dda
-
SHA256
088e4253acaab29b20975efe1db58c1806487f42be37df62a60efb398185155e
-
SHA512
f402bbcd51b45d949c84648f600b60654d2ec568b4600b32b511c7870d181264b705362611cb548b8e341d53003c9a689d85f7b81fc6234bdaf4a89380f2b7a2
-
SSDEEP
96:QNSdVi9R9iyDOyvnh08H4aLS7ZqjXV7BuTs9zNt:QNMiX2yvhXH4Iiqbx3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource recogniizerespond.exe
Files
-
recogniizerespond.exe.exe windows x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ