Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
General
-
Target
file.exe
-
Size
353KB
-
MD5
75fb37cafaca979c1b07e3b7d925ff75
-
SHA1
29669ccace384e7b935d7c2ab19322497a09c306
-
SHA256
7af8ec2e87c9e1d2be65259da4c63b5fe0a43314e5de4e3c7f24d6c006c9a5f4
-
SHA512
bc1b97e0fc35a3af7fbe2891d08e1e1ebfe564a0dd99f5fbbbb94cc7e8db4da9e7024be2750f08992941baea16ab951a0bdc3ee3ebfffef29fb44c1ee52240b6
-
SSDEEP
6144:eO4PYKEEBjsdRry+TrBivocD3dIF0f39NXyKfDmhRpbU:eO4P1NYxyiNPmZryKfDb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ