Static task
static1
Behavioral task
behavioral1
Sample
1233.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1233.exe
Resource
win10v2004-20240508-en
General
-
Target
1233.exe
-
Size
335KB
-
MD5
4072a3e4a49cdbf56b6f1ee3f2c436b9
-
SHA1
c550096f440eea79a317e9379c3ebf7c0b1fa01e
-
SHA256
2df0ee408080eec3cc95c0fccea40456eec464ad5c67aeea606c52bdce9cc15b
-
SHA512
43519885c831411d1fb6f3e8097175c3a5847298f3975bfa93fb24d28e5290c26a54967d0984d0e71e5026fc43eed647c66f4be51d297c0be3b83cae3416c0ab
-
SSDEEP
6144:fm2exBWx1xLe6VlWT8b9tMhfCweTM39zqbbgo/7:fbUBQPVle840M3Cgw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1233.exe
Files
-
1233.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ