Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
General
-
Target
file.exe
-
Size
449KB
-
MD5
82499e2449c2c4810857a69d42c551de
-
SHA1
5671119c20d8f50a9ef644acd4728c5ca2b7f143
-
SHA256
621b56b665949db9638408b5a77df1488c6ee221079669e7b71b7489af1571f5
-
SHA512
9a37e57cce2e7033b1e66bc4a184c2abd015e9f2b295be5d9559a88691fe22bb98ec594b83abf5bc73ca84bf28ee1f642da571b07ca47b2ddbf8a6c2d0ff2b9a
-
SSDEEP
12288:Kh/DuynQGZnHt8vUe7UBIE0xdvorWo5xAB++SoV1qqpffooyQz:KuynQGZnHt8vUe7UBIhxdohkv1RX9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 446KB - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ