Static task
static1
Behavioral task
behavioral1
Sample
malware.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
malware.exe
Resource
win10v2004-20230220-en
General
-
Target
malware.zip
-
Size
5.9MB
-
MD5
a85b7fe3e3b93ce79db818d05a5b4f5d
-
SHA1
ee3f36c068759b8e6852d4281329b9f76826b793
-
SHA256
82425559c52e44889c3e5ab5a20a83fb2fb49ede1bdad876e8452e82229fb881
-
SHA512
c580e968f7decbebcef2f92967d028abe68020e125f620c238462fe980d63aa85a3751fc7205060b3015948cab81d5b050dd77b3a848d8e56fa5bc1bf88cb67a
-
SSDEEP
98304:PtwIu8OZ5MFxhOXN8vV5RqR+e0Yq0neJoWnu5KbwuEIFgb:PnEEm+ePeyWn06gb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/malware.exe
Files
-
malware.zip.zip
-
malware.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.CCCCCCC Size: 1.3MB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BBBBBBB Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE