Static task
static1
Behavioral task
behavioral1
Sample
22052024_0641_DXJS_exe_sc.exe
Resource
win7-20231129-en
General
-
Target
22052024_0641_DXJS_exe_sc.bin
-
Size
337KB
-
MD5
e10e87f59726d45e840eb24f9bbdae48
-
SHA1
386a4a7e04961a0d450d2aa0e9d6e3b4c64f12eb
-
SHA256
e138a0d5e625340ee5b1b0936301392cbf7a9f35a8347657de0ab4cdd47bdeae
-
SHA512
46f6c6f2a4cb734876b344fbaa2bdb506a46229afea3406f9adfae5371aa315a018d80da74553c102ee22c516becb4a442b0bc6b24cae80e61274a9c6befb544
-
SSDEEP
6144:Fo+pJ8RgQ+Z3szVOJiaR+ULVOX2chG7uhLMiZ3Lcu1Tvk3/m0LZTUQZsh81jI:F5eYZcOJLRhLOVAM0mkJM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22052024_0641_DXJS_exe_sc.bin
Files
-
22052024_0641_DXJS_exe_sc.bin.exe windows:5 windows x64 arch:x64
Password: infected
b547b1487151c8557bcbc6c24574ec6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ExitProcess
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 335KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE