Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230221-en
General
-
Target
file.exe
-
Size
403KB
-
MD5
0bbf771c23e77d0f67ac68e739f8bd5b
-
SHA1
ca5612a8739476297c7b8535f7a34f020bacf8a8
-
SHA256
8c95992bf35e5bc0d46244bf2330bec5711f409cb7fba2a2d52c28ed54ca4e80
-
SHA512
cdc58bb031e9fe1691691a5dc4ca51d35754efae67f6919f47ec47681b6a2d938b82f2fbbe605b14ab2e84a4eabfd5b9545b40419491defbd92f65820bc0a538
-
SSDEEP
6144:hP1IAsudOs2633urCApOlOpT/leT78bJFdIY/xDDDzjltY7QMq/TfL9Y2bd:bisH3eCApOUpT/ccWUZlCCjLeE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 401KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ