Static task
static1
General
-
Target
unb.exe
-
Size
987KB
-
MD5
2ddffd31ae0b364e2c046d10a261ea5e
-
SHA1
8ed373a9e19948f4718c8388e3de5ecd9ad6be72
-
SHA256
a89eeb1fe761772d276fcf6dced93db956ad2a8b6a2b255ba7df4a499f91ff36
-
SHA512
3197c22f130557b5a0b3b1ca5199a7092e4bed66fc1cd171680c66e5346b8f608de5f56a33af1d455320c245e51889b6d6922b348876c69071af514813d2b30d
-
SSDEEP
12288:5BxVguEbRDdo4GQamgHqF266ZCBjN7L1VjV3uRHFdVmOoK/u44f/AWiyPgesobGV:PguEbX3tambM6OCBRHXmlBlJXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unb.exe
Files
-
unb.exe.exe windows:4 windows x86 arch:x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
=;v//TU Size: 483KB - Virtual size: 483KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 500KB - Virtual size: 499KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ