Static task
static1
Behavioral task
behavioral1
Sample
123.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
123.exe
Resource
win10v2004-20230703-en
General
-
Target
123.exe
-
Size
6.2MB
-
MD5
808290a4caed218977b72ee601613411
-
SHA1
968a8333740427e4da4cd87eefd7cc13adcf9a14
-
SHA256
793b1357f3e6df7f5b0e4d4bcc4d620289ce18b9b93d6c30945e984f24e29a24
-
SHA512
8f60bad88532ed8ed07e4c8656ca63fefa151929c11198bf4b6790a295f28cc1c1b247a31657473c21ac07c237b20fd1802100a0260ad3b570575c7b80df9908
-
SSDEEP
98304:0D9VVVYbJGHnIKyQPofxXnh2wB9zPH0pjOYxyCAtzGoEPBA/aN8SzCjnxWD:0pVVVYriPWxXnHlUpjOYgw3Pq/28Su
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 123.exe
Files
-
123.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ