Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
General
-
Target
file.exe
-
Size
317KB
-
MD5
1dcf95f327317fc19c8e0090734e7756
-
SHA1
834052d769c95768df466c9ffdea56df68f3ba5d
-
SHA256
8b8933bf08b6e444351ab6c9018b7ebc0c4698fdda282b98d3212169f287aaa1
-
SHA512
933be879cb76fc8a1c1a88f0568c4f90012651d4c000520b974eff95d149a09ac64d43814f331deaf9c9be666351e7e16940a564b366adbc26e84a2d923b313e
-
SSDEEP
6144:mgeBBMr0Q4YysYZSIz0Hwr2g4LKb+QrZRLqgE8BCr2f0hwobmp:mgeBBMr0Q4YysYZSIIHwr2gWKPrugEw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ