Static task
static1
General
-
Target
Cs4Hjck.exe
-
Size
9.7MB
-
MD5
d9aa1d8a464bff56afc57ed65165beae
-
SHA1
36e6ad13c33437df87469c96e331b346e50d2ab2
-
SHA256
3b3bfa9ee2e7d9d4fd567fc4674b629e18ab5b1a779d0d63cee408d3365cfaa9
-
SHA512
9987dc62044e67da1b24540b01925cb095fa571ad63dbfdb8a9d0c7227b2e9e098ce95fabb587e4a0d3c20578494e9d4e5c268222955ec3d61a91bf797fcd97a
-
SSDEEP
196608:Ss1hQyMhk4HuFP9sYr/FXQrXZgeoYcz+P3Luy:SsMO/RQrfTuy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Cs4Hjck.exe
Files
-
Cs4Hjck.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ