Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
General
-
Target
file.exe
-
Size
5.0MB
-
MD5
8a480d7b375033cfab0c27a579d227b7
-
SHA1
2430e9a6beb4ae26c4e03419430e91dc8c664b7e
-
SHA256
86e0c218a248408a2dd23c45c94325077b361962bd7318711e31a8804aa15250
-
SHA512
3aff8134f71c98da71d33e223f004dc9d4f72556fd46d92fb5bfe6c8361bff8985cce2fd1c57b5e2c7c825e2c559fa6d16847d097739a4b2b78d10720f566709
-
SSDEEP
98304:r6xZCG/JBTgFevTO0oMiZhoG8HrjzF7h9J1KBi+IQR1:OnCG/JtgcTO0hiZhCzF79MBi+IY1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ