Static task
static1
Behavioral task
behavioral1
Sample
InOutCheck_bk.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
InOutCheck_bk.exe
Resource
win10v2004-20231023-en
General
-
Target
InOutCheck_bk.exe
-
Size
234KB
-
MD5
951a3070c088a20a7118cf0c236c5c8c
-
SHA1
9a5efeebb38942f18b352e60d9a43bd52e9c03c1
-
SHA256
39d2afd012526bfe8db11c7ea27be4754c1551adf2f7e12ac66034a1445d6349
-
SHA512
44135d5fe8062fdc521d83a961439b9e1232b8a220c875bafc90ed79b91a2729931acc52497229acfe14c567319454c9e0a594dbae5bdfe616d77c560099632b
-
SSDEEP
3072:0imUEcfcI7SYZHh6tb4z6UJLRTJ96XJhqf8sJmEhdl/y4W2ZQibWRwZfBoLknjjC:jEcfcILd88iYt3JgiBw+U5y7uTWbKv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource InOutCheck_bk.exe
Files
-
InOutCheck_bk.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ