Static task
static1
General
-
Target
Google_Adobe_FlashPlayer.exe
-
Size
9KB
-
MD5
9b8ec48d4be4405140d7555dad2b66ef
-
SHA1
bc755383a8a9920b26bb9e7ef836dd3f3f4b589d
-
SHA256
85be64025453711c9c7396efe3965b79f0115fd6647c68d186edf88d6398c21f
-
SHA512
b8babae54c95e4abfbc42b3ebc20187124ce68e254aca7c272ab3104e107c7e1d78bc3a70206224f4e7727a35bf4688a65b21d9ac62c9e2175a12f7eda1bdfdc
-
SSDEEP
192:xhD+Plv1QrJ/4M0EOMbjQ16jLgFhXLKO0T:xhcv1QrJg1EOMbUIjL+he
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Google_Adobe_FlashPlayer.exe
Files
-
Google_Adobe_FlashPlayer.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ