Static task
static1
Behavioral task
behavioral1
Sample
140000000.filehistory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
140000000.filehistory.exe
Resource
win10v2004-20230220-en
General
-
Target
140000000.filehistory.exe
-
Size
435KB
-
MD5
d1a29ae7e04374c4dd68058e51c7d55d
-
SHA1
23c3e319b1b301b00e52f950df00a9aa056f6cfd
-
SHA256
d471be2737c03a4adc00e5cec0e55a785ae718429f5d946a296c899bafa2c83d
-
SHA512
32ee15a2cbc897504efd45ba6d6e11355c069333ed31d0513957e2bad80ef8982f6c19e321cafc657c37b758d2b6735d6b5bdb26665cbbf34d266b65b7a88b87
-
SSDEEP
12288:US/t30aR8Ot+MVYH9mJ8fxsZTPM8VzT121n:L/lj9a+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140000000.filehistory.exe
Files
-
140000000.filehistory.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 433KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ