Static task
static1
Behavioral task
behavioral1
Sample
sweet.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
sweet.exe
Resource
win10v2004-20230220-en
General
-
Target
sweet.exe
-
Size
904KB
-
MD5
b7fb19db49d5531417466e21b901c419
-
SHA1
2dd9df3b50c3282572f40b4e67f01b723703bf59
-
SHA256
3a19f9944f5d5cdd397ba81ccd126a239ad33112c38fb6875c325afd6e539f88
-
SHA512
31a2dd018e172d50eda0a5a88a71b5d5671afdd5e99a4036b9a516bd136a3b760ff08f29dbbec712cbca39d0e83b7f18c69cb6255c4060e05be403074853f7aa
-
SSDEEP
24576:Kdc8cY5G1FOPjWcjL8TxNYqEv0rODHZ/lpWUmJKfplz7XWQ9E:K5cY56OaccTtsWIZ/GUm0fpB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sweet.exe
Files
-
sweet.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 901KB - Virtual size: 901KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ