Static task
static1
Behavioral task
behavioral1
Sample
arinzezx.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
arinzezx.exe
Resource
win10v2004-20231020-en
General
-
Target
arinzezx.exe
-
Size
722KB
-
MD5
fb454917f7014634810d1ef7c083b663
-
SHA1
29772a1a255d327f3443cc98ceca6e973b9afcfc
-
SHA256
d683eb7b2ffb8b8e7131a4e135273eca2c8c8fe04a20eb76ec079a6266c7b690
-
SHA512
5425453a75e89d72e7be1b6c9d5a5c4b1bf79961fd0978ef8e89b20d1a6e10acac125e51af9265fed0f30614022aa988b83431b17ece9230ead569ef8da45791
-
SSDEEP
12288:dMrHMAgR/mZRM+BAuci1VFA8a6Yd/PwDBejxZL45LqAOlTB:kgkZR5uATA8a6yPV9WN96TB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource arinzezx.exe
Files
-
arinzezx.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 719KB - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ