Static task
static1
Behavioral task
behavioral1
Sample
ConsoleApplication3.exe
Resource
win7-20231129-en
General
-
Target
ConsoleApplication3.exe
-
Size
171KB
-
MD5
b39b2be4f92536b2e1475396de0244ed
-
SHA1
97199161fa7e4e7ab4c8cf13b6c7cd8cdd0b0fbc
-
SHA256
6112406d4e73ddcbb810563740933141278e39a98ef79ddde0354d5584f80527
-
SHA512
865f3a2c69758cb1ce799ebb01cfe7353596e3db952e0ce89a6451bcef853a7c3d03a5cd2b4ef889d79054fd5774fd89e59157f7e90458902431985496e5e28d
-
SSDEEP
3072:2omrzp/OQVBHiHqB4sQQTURyD+ZxQsyO7szP70dSIZ22syKCZVZ7rfdg:2jrJOQVpiHq21NRC+yOorAPbKiVJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ConsoleApplication3.exe
Files
-
ConsoleApplication3.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ