Static task
static1
Behavioral task
behavioral1
Sample
prototype.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
prototype.exe
Resource
win10v2004-20230220-en
General
-
Target
prototype.exe
-
Size
11KB
-
MD5
c2698991216f2357b1a246c7cc5736e3
-
SHA1
b2ba7bfc00bb66b00fe5a0b2e693622cc1a7ca02
-
SHA256
6bc06ef4f9f885b381d2418ddfe3f6c5f93f48e04ef118ab1730d8bd27d59912
-
SHA512
c1e652381a09341bfdbbb49e998f3129dd63e6132bdc0858305f0872e89d3e5e2d51a59246d9c8990aa594656450738479e1c10b022a9a4a14c201bafc8a4637
-
SSDEEP
192:WCCewMqaNN82yxXfdluAjKRo08XaxbVHms2Z0LrfEWiTsqKNW3/4:PCeNi3rb08Xaxb9h2aHioW3A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource prototype.exe
Files
-
prototype.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ