Static task
static1
Behavioral task
behavioral1
Sample
nnn.exe
Resource
win7-20240903-en
General
-
Target
nnn.txt
-
Size
1.1MB
-
MD5
d339683a764e49413878a53ecca1115e
-
SHA1
b1cdad94beb95570bf79ce8ddce303a6adc6a645
-
SHA256
6fd73d755b0173df9d053ee54130059e4ffabbd12cf220a4475137943cae7461
-
SHA512
1ad85d4af989bcbae1a9d14fd46adacef7fc060997171d4685bdc64f55fe0dcd3b006764e68ac89c61ccd43a2273a0abdb71b3b3ef29708dbd68c3391bcc9649
-
SSDEEP
24576:/2YKVYezmE95uretDFKzOBEwAftuvmYpMtSHc/JW1:/2YKVPCeeb5YO908/JW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nnn.txt
Files
-
nnn.txt.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ