Static task
static1
Behavioral task
behavioral1
Sample
Request form.docs.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Request form.docs.exe
Resource
win10v2004-20230915-en
General
-
Target
Request form.docs.exe
-
Size
745KB
-
MD5
44cb7649374df879012160b24ca69a60
-
SHA1
c637e480a3335a8ade7a28058798e6ddc764ca89
-
SHA256
3033730f6b585fdcb6e1cf2a88e8debd2f73e2e5c7064ec0b13e471bcffe191c
-
SHA512
30add6247c2c9b4d0564f7433a65541e6d8e4c5d933bf655ab3ac1ed4cf6047cbff18cfc6c60b2d4b7c7f1810802e93a851212cdf1d694e2f897de0ae1536f6d
-
SSDEEP
12288:os1XVFrB0mdEATN6P5zK3vBdljH8aEQalJacLyJQE8cWwz3ZsqJ/:oAuOTNmcvpjcLQyJvGGErsqJ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Request form.docs.exe
Files
-
Request form.docs.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 549KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ