Static task
static1
Behavioral task
behavioral1
Sample
clmNoSima.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
clmNoSima.exe
Resource
win10v2004-20230915-en
General
-
Target
clmNoSima.exe
-
Size
6KB
-
MD5
efab3365075f6e2288f602fe13e4a200
-
SHA1
a791502d148ff5bdc687cf243e0ec24ff7531a79
-
SHA256
2238be82787114497b4326ae6d09becee2bde1f4c717f567afb053a2dac5d747
-
SHA512
f61de97a674ac2908582054663a1bd7cf38abdd423c033775b2b98611631498b3bb9da918e6626673c6cf28ae7dc14c12340f5be602f54543d25f73e628cea4f
-
SSDEEP
96:Q/j90G/MzVEsxBgnlT3+eYflrkKIHlbXrl9rzNt:Qr9g2DnV+npAlbXJ9t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource clmNoSima.exe
Files
-
clmNoSima.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ