Static task
static1
Behavioral task
behavioral1
Sample
asd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
asd.exe
Resource
win10v2004-20230220-en
General
-
Target
asd.exe.bin
-
Size
699KB
-
MD5
039838ad7d88b9ac20d5f8886d035a97
-
SHA1
adde6c32e63c8dc04c2877662442f2d74bc893b2
-
SHA256
b968eae40d201ded2ae5a5a52042aee5fe252a60cb15d79a6e5f1ec3dc93d0a1
-
SHA512
1dbbae24a2bb2a155ca37a076e10c9c5b8a2aee90fd5ef5e456a4d69b6550019031faa712479ee69018d44fcc3e61a95a3ae29db125350dc44a9577d6228dbb5
-
SSDEEP
12288:sJUl1Y7ODwIZ//qJyxR0kVtktVpr8PrfOkYWKWv/IBeADltCnTUcaPLoEDqKKY3h:SUla7q4Jy/fVtktVGPrfO/Wxva3UTcLV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource asd.exe.bin
Files
-
asd.exe.bin.exe windows x86
d436c55cc61e4d62b21359ff12be3c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
MethCallEngine
Sections
. Size: 675KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE