Static task
static1
Behavioral task
behavioral1
Sample
Confirmation.exe
Resource
win7-20230831-en
General
-
Target
6a37d13562f3ba6e8a17cca9987339ffd65174d2c0bbb62971b3f703bf675eb0
-
Size
647KB
-
MD5
d506fa33daeaefc7320cad4f8368a49e
-
SHA1
cbe2ac006d6737262fa6235c4d665abf060aaa5f
-
SHA256
6a37d13562f3ba6e8a17cca9987339ffd65174d2c0bbb62971b3f703bf675eb0
-
SHA512
01937ced7cc26de65de5b2e1d90236db20d305a242edb2d5c797e87f7731f045090eb20d6f2a29df315e5288fdc255a35ce6c75b79a3205b904c4731a54f8352
-
SSDEEP
12288:odKlE6JqhfYHRiaXwep2MEavfQFd6kCOuvZVr+jyaqoiEcPQWm7lBy2sWx:HKYHHvXwe4GQFd3CzQbNAy7zsWx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Confirmation.exe
Files
-
6a37d13562f3ba6e8a17cca9987339ffd65174d2c0bbb62971b3f703bf675eb0.rar
-
Confirmation.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 881KB - Virtual size: 881KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ