Static task
static1
Behavioral task
behavioral1
Sample
MITCalc001_64.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MITCalc001_64.exe
Resource
win10v2004-20230221-en
General
-
Target
MITCalc001_64.exe
-
Size
52.0MB
-
MD5
f15d130ad21dda217b71dfc221b12b7b
-
SHA1
e935a664d5f1088d569cd82e45624d8725892df7
-
SHA256
764096457b7c08fb141289bd68f89e0fbea74a66cc35728668a1dd44e46f6f98
-
SHA512
ac79ef834d2b1bc8359846cefd4a817c91a8047bc9e81e66b3ccbf3ec1bb8f47044b066cdff11ad89e6c8f3ab8de7f48ddb6dc066e56cb4249ea588bed740ea1
-
SSDEEP
1572864:v0Qc+ZMiw8tY97VvX5yCdmdaCso/2gkIErzouD22TE:v0Qc+WmtY97FX5yI8aBo/2xrzouD23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MITCalc001_64.exe
Files
-
MITCalc001_64.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ