Static task
static1
Behavioral task
behavioral1
Sample
CNET_103644.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
CNET_103644.exe
Resource
win10v2004-20231025-en
General
-
Target
CNET_103644.exe
-
Size
9KB
-
MD5
bb1ccacf71432dbfe375e80a863c72f9
-
SHA1
e5bc6057d7c37236dc355de4e358cb0d1c3903ed
-
SHA256
83f3e4bba81bab1b0e9095122d229089d02f3435b85e87d2f00c9c9ccb2dcd8f
-
SHA512
8407c7140e12a070450259c72c335eb261d25105073974d60daf9ce4251caae656b059dae68ec09074ff72503a52cb8784a7506f577ee2336af0498b245d9cb0
-
SSDEEP
192:0hoSFwaxK3RxMtYMkYm+h8zyZAwA9AhvF4WFsegV/hB4y:0aUK38tNkrptSwVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CNET_103644.exe
Files
-
CNET_103644.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ