Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
General
-
Target
file.exe
-
Size
353KB
-
MD5
c8d1cc8fe5b7ada2b0a0dc31262fb5ef
-
SHA1
118a7ae1f17f6e043a65e603740c0abf403d94b6
-
SHA256
20c999d8246719da750265ad88e266220b50cc74c2a36b3d1f2419e832e2d5bc
-
SHA512
f513e0416df838337c76ce84c0661406f3708ebd8344e2236c489ada4c1ce0362d2005e2e4e59fdf6765083d6a29bf1c67ad1b9724398ab16062da8b7d3ce255
-
SSDEEP
6144:rpKJgJ0SFlWad4ky3cpds+c5Am7Vx7UbxnvM:lKJHsM3wDcThx1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ