Static task
static1
Behavioral task
behavioral1
Sample
appcr.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
appcr.exe
Resource
win10-20231220-en
General
-
Target
appcr.exe
-
Size
10.1MB
-
MD5
0d685dcaee0837abd76ad6129b349ebe
-
SHA1
c338f93b49dcef1f6b6e691db79225492cb6232c
-
SHA256
504a6b8ce51c3be7de7e74c98c6da3fe12b186f634c441b43fa21f3350b7f1a3
-
SHA512
037110577978d05661ba81816df5896625399e358bd666ca7fcfc10a3f1d9f5110b1f4b2caf99cb25c69c593e130ef6aef5229f6c0a208895a0a4ba4575ed9a3
-
SSDEEP
196608:lxpG9JD2lr+EQfHmcjtibjaot1/02nCcgm6SunYLXZwiXEaljRgx:ZaKlYfHnjtibTtBnCzyLXZwi0aHw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource appcr.exe
Files
-
appcr.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.8MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ