Static task
static1
Behavioral task
behavioral1
Sample
RH00986545678.exe
Resource
win7-20230712-en
General
-
Target
RH00986545678.exe
-
Size
300KB
-
MD5
1c35a30c13de88ca3f69ef12c0d89262
-
SHA1
608e1885ac8504394543b9d6224a4a88a4eb6b02
-
SHA256
b8b9c2bfe75178cec0d3b26b863bd451bf0233171332cb08e79bb6113a5b42d2
-
SHA512
27f292775ec47a8b69adcef4f4aa812ca32ad1a281860f240f2d2d17973a02178351606770e182baca7605e007332d087912c956d30ad39e9726df7b45e58475
-
SSDEEP
6144:8Idki46oScBWfI7GRxL/kIp1kO+jQ54mqjomjTBuEVD:8Idb465cBojEOTim6omvBu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RH00986545678.exe
Files
-
RH00986545678.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ