Static task
static1
Behavioral task
behavioral1
Sample
sample_01.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
sample_01.exe
Resource
win10v2004-20230220-en
General
-
Target
sample_01.exe
-
Size
42KB
-
MD5
de3b1dc2e2b45aabff72291e19208acc
-
SHA1
4ae717558b31943de239500d55e1f6acda413857
-
SHA256
300f072c7d3530455a17f00ac7733a7630f7639e4a8afce3fd3f181324fddbc8
-
SHA512
9620abe996089c0529be6c12952520433d9d20aa5f8676e472d3659baf3bb953902c05fa9570a71f483b2ffd408de9778b546a95dc0f90971dd50d1f58c88884
-
SSDEEP
768:NKBm2CDZgq5d8+BWXWtEXmn4YsOv6hdRbQVT+2sddE:4xg5lWEhyuJSdE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sample_01.exe
Files
-
sample_01.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ