Static task
static1
Behavioral task
behavioral1
Sample
sexologiain_1809.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
sexologiain_1809.exe
Resource
win10v2004-20230915-en
General
-
Target
sexologiain_1809.bin
-
Size
609KB
-
MD5
0b190d34773c4726569493c456a469f8
-
SHA1
4995b411470026ef2d829cbbd1f1321b7b34b8d9
-
SHA256
c4d37fd82ea79530d19f486bf994001bf4f68bab3851cc8e48c105bd3ce32c4f
-
SHA512
e650281508b007eccade3dc5a56a56c7f5e02ec1e17c37f91a857f020ad2f4e7fba15d31b8b2e81de35ac3c5930d187dcf05c3d446aeb6109ac1f2efbd98e8d3
-
SSDEEP
12288:YwnMgE0qUfDQkjvt2l9GutowNqN5TLAJh:EuUw1M5ows0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sexologiain_1809.bin
Files
-
sexologiain_1809.bin.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 497KB - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ