Static task
static1
Behavioral task
behavioral1
Sample
89.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
89.exe
Resource
win10v2004-20231023-en
General
-
Target
89.exe
-
Size
28KB
-
MD5
8442908254ed3ad727916e5449478e8b
-
SHA1
295703b6b0e842664e7a9bba1a3b3ad1006e6e41
-
SHA256
4716e0327945e9069fb3793dbd1585a1f628faeb6cdeda16ed030ae080d48202
-
SHA512
c6c3c17554ed1afa54887f6f8be595b0f1911b72b7f5f199043479064d353b68f08f03ecafb2648635b03ef6644faa709216fa43df508d7f6cd51b645e76e9d4
-
SSDEEP
384:qMaUaNdr68qRd55PVjwlkVIXM6eX9TL3LPyXgiWWAYIQ:q7UaLGy5SQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89.exe
Files
-
89.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ