Static task
static1
Behavioral task
behavioral1
Sample
img.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
img.exe
Resource
win10v2004-20230915-en
General
-
Target
img.exe
-
Size
786KB
-
MD5
88acddf4619355de351445b40d5619d4
-
SHA1
5b5cfedb0bbe515d0ab07742c088343bddfc75aa
-
SHA256
c19e44f612b1b11dacfbed23b9de1b2af9035fe080438615d8f38f2ed079e93c
-
SHA512
34a6efc5d4b820cf2641f082de7ff7d9185fd4bf0f68b1c970e00cf8af47539803576b3d0181c9d7b958c7ed66e980ef2dcdd8c707cbd279c32035ce9492011b
-
SSDEEP
12288:MQS8rhUzt80TkT60z2QDLJ1Fj37xnprJiWn+bhgrBBLRHMHf:MtrwLJ1Fj37xnpN5n5TdsHf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource img.exe
Files
-
img.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 571KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ