Static task
static1
Behavioral task
behavioral1
Sample
c447c561925b77d52242def762ee394b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c447c561925b77d52242def762ee394b.exe
Resource
win10v2004-20230221-en
General
-
Target
c447c561925b77d52242def762ee394b.exe
-
Size
1.3MB
-
MD5
c447c561925b77d52242def762ee394b
-
SHA1
ed080f397aacf655e9beb0583646f019e069f91d
-
SHA256
2bd44c7eb0536845a0fa4ec54eaf49c47120c154d5d29ff167c312adc94a60b2
-
SHA512
fe2755a2157f2987231de96b4120f38af8849db21a9bf67fef253be63acfba29a39fae68ddb6a23781018d62cd89ac177dffc6faf7164499e64992571a07b575
-
SSDEEP
24576:45TTngb0u1iILnraOqHz9Yen5f6CDruxp6/:+g+I3+pZ5SCDrCp6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c447c561925b77d52242def762ee394b.exe
Files
-
c447c561925b77d52242def762ee394b.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ