Static task
static1
Behavioral task
behavioral1
Sample
70203bbbac42882cefe8aff531395956.exe
Resource
win7-20231215-en
General
-
Target
70203bbbac42882cefe8aff531395956
-
Size
149KB
-
MD5
70203bbbac42882cefe8aff531395956
-
SHA1
8a400a81caf497cb3b1958cac0e673d7dfa26638
-
SHA256
652a6d8dda94d07a0adc5a79bd6c8c722ec11f4902a01a01289b6cb428eaec3e
-
SHA512
aa8f51eb94f36b1fb5b27401ba2b3c0a021ddbf688491cbcd9ca6ca25a529cf94f18cc9701816e2aa5a1f4a39afa566ac6a6959316ed18231c0dd2c5218c05a0
-
SSDEEP
1536:ctg3jyxwzoC8NPt7thteiVfMOstHAW6VezKbvmz9NxAsrQz/1tS+nYfOvZFXWkoI:T4w0C8NPt7thXUf6VomsrU1s+KORbrp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70203bbbac42882cefe8aff531395956
Files
-
70203bbbac42882cefe8aff531395956.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ