Static task
static1
Behavioral task
behavioral1
Sample
2068.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2068.exe
Resource
win10v2004-20231023-en
General
-
Target
2068.exe
-
Size
9.7MB
-
MD5
4d23e19b58f419060ccc8dfa0f6cb677
-
SHA1
03a7518d6044cce1cb6e671805ccb2f6ffa4a7bd
-
SHA256
06bb27c7c643b52e70e0332069c63cfcab825716dc922091212352b92c870183
-
SHA512
60235e36dace2c21b8090d622850579ede630bc14b5606c98b97417f59b9d77986ac3c5ac27bc4739698bf49d7a15aa367abf6eaac82a531b2040a6e960ece7b
-
SSDEEP
98304:NTf7Z7iOCpcV9k1FkTf7Z7iOCpcV9k1F:NTDZ7BC+9k1CTDZ7BC+9k1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2068.exe
Files
-
2068.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ