Static task
static1
Behavioral task
behavioral1
Sample
A.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
A.exe
Resource
win10v2004-20230220-en
General
-
Target
A.exe
-
Size
443KB
-
MD5
706c4e397de8260d889cf83ba6707e7c
-
SHA1
dd4510b6e29157b56b894e06cc8f8687f4af7143
-
SHA256
1df360694e4b54909b416b5ef5095e54827c8e53d77885032df144272508f013
-
SHA512
d3c55835ff9bc6b00de4e82fc4318baf66a63733c7c88d8a5cd87430038fe7dd35a547dd1978a372dee9b59b8ba9a10e2ed5f35a146342ae4eba8c46da8893e3
-
SSDEEP
6144:Ih7kAkJ0xZuuRlxnUDcWZXA3Zz9mTFLHjhzypfbVb4vG8nYH5d7cwSthf64lv:IJLkJARWIyXa5ULHjIZKYH5VvStRTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource A.exe
Files
-
A.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 441KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ