Static task
static1
Behavioral task
behavioral1
Sample
2163f8e6dfc466b6f986ec5903b888f3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2163f8e6dfc466b6f986ec5903b888f3.exe
Resource
win10v2004-20231215-en
General
-
Target
2163f8e6dfc466b6f986ec5903b888f3
-
Size
363KB
-
MD5
2163f8e6dfc466b6f986ec5903b888f3
-
SHA1
ac075c1a2a209b5ea4e3aa181b67dceaf5166278
-
SHA256
352347aa7b8db3f876cd4d756f4f94dc00c778107533b616f465447741b94e0f
-
SHA512
7b9ec58c8f343dff59aa75ed14f3e0ccea046dac9593b414f2374c4bc571e3f3c3c22a2e3be4d70ca757fcba12edd031d1677237d4d35de62459925db2e960e7
-
SSDEEP
6144:i09M9uUxeEI38wvM8BxFs2lL7qcLLYyATLJyrjIdHtIMJmobxQSW0tuZq+nQQ440:iZNwzTXHLG8IdHeM5xRW0yqNd8zcy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2163f8e6dfc466b6f986ec5903b888f3
Files
-
2163f8e6dfc466b6f986ec5903b888f3.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 350KB - Virtual size: 349KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ