Static task
static1
Behavioral task
behavioral1
Sample
INV0038234323.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
INV0038234323.exe
Resource
win10v2004-20230915-en
General
-
Target
INV0038234323.exe
-
Size
526KB
-
MD5
77e2b4d9a9eeb62ca36e241d6c193c19
-
SHA1
6af3c23f5484b2e994c9d00b7f038cf7ac85787f
-
SHA256
bdfabc2afce989e2dab48f9f8d04db605b9c29802fa95fe559f6cb9898da39e2
-
SHA512
28da65083d065684181735f314ac9d63802b8eb1014ce62c72bf492b204bbfc3c9406cb4ac914e716d06a4f0af943280164c79dabb6da11eb3eebc9f0106e947
-
SSDEEP
12288:KzfqBuxZTH2IcvrPklZRSkfXksQDueRvM8yz5pmX:KT6Yb2PvowkfXksQDueRvM8EmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource INV0038234323.exe
Files
-
INV0038234323.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 517KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ