Static task
static1
Behavioral task
behavioral1
Sample
Product Offer November 2023.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Product Offer November 2023.exe
Resource
win10v2004-20231020-en
General
-
Target
Product Offer November 2023.exe
-
Size
630KB
-
MD5
e4f258b87c2f50d451c477b56ce24005
-
SHA1
1de7c2eeb8812b9806dbf4a199b6463274601d99
-
SHA256
deec2ec6247e9177664db49acbc92620ad8d532751d7e07bcd8b062c5cddebfb
-
SHA512
e12e77fbe0011d7077c37a8e8fec2061d48ed1c3359b44b54d000a5c581bc71e3db78b7bff6ef9743df5e7e56ee5d64d5c1ed22c7f2b8ce8126ab9b7c59f566f
-
SSDEEP
12288:CWv5ltXcgW+8n+a0dMAGwBTEWfmBSpmYhnbd2dHNqDgOsVmnl:VvHWH+dLK5SjhnZ2dwssl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Product Offer November 2023.exe
Files
-
Product Offer November 2023.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 610KB - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ