Static task
static1
Behavioral task
behavioral1
Sample
243.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
243.exe
Resource
win10v2004-20231023-en
General
-
Target
243.exe
-
Size
20KB
-
MD5
b119ae120c5bb6ca339ce2bdc6295abe
-
SHA1
f59c27d9bb11fcf993f526959f5e619a5092c715
-
SHA256
c3d800e63e7c6b4378805fb4463913e7ccb771210b79ff9b1323d1ea4d58d1a9
-
SHA512
53dd94baa7c3e13cc0841db7163e5c4e3172f0de997d849b4b4f6f77ece261215de2afc7228c695a21b653ca8fdfb3b8ad9fc369ee68da7a3ecc903e09f342fb
-
SSDEEP
192:IlL2wWiV2espjgTFgVzxmTk5V59fqjN/:tXgTFcxmQr590J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 243.exe
Files
-
243.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ