Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
General
-
Target
file.exe
-
Size
4.4MB
-
MD5
b445f46129321476c57014cbb0962df1
-
SHA1
9a40d997cfcf4552875224650c1f0286bdb66763
-
SHA256
dc58fa5e6b22879a9396d48b40d8244bb8032f5c66e3d7a0bbfd65f76a34ce61
-
SHA512
f07008c7748a278317d11d0ae4315c71f79517fa3520001105f1f988629374796635b138d3258f7e53f405b8cea401cd95a41e484b7eff029f1d5015f0664444
-
SSDEEP
24576:7j4lvkEg5m0VGfUbimv0aEaEaEaEa1+9z1AVFEAHbWsZ+C:uNg5LGMLHXXXX1MRAVF3+C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ