Static task
static1
Behavioral task
behavioral1
Sample
Client.exe
Resource
win10v2004-20231222-en
General
-
Target
Client.exe
-
Size
1016KB
-
MD5
9bbb42c17d8f659c9ea3bbe76836a1d7
-
SHA1
77f77c9426d06e02439912a2e572e4c7ebf468d1
-
SHA256
3863e65f493fd94a619472e577a7fcfbdb7b2e2765eefed8b053fed35b7c1808
-
SHA512
32bd71ab3179c75a78f186bd0e1b8d883f5b0a8490faaf016aa3cc689233a06d93d58d69bc6243d6c6af4ec33930a928d6ce523ab98abee246d7a6d551701fec
-
SSDEEP
12288:o0lN9lrJsF/3EpHEznGTnU6X2RtCY94+:j9DsZUpkznc0Pt4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client.exe
Files
-
Client.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1014KB - Virtual size: 1013KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ