Static task
static1
Behavioral task
behavioral1
Sample
OperativesDataSign.exe
Resource
win10v2004-20230220-en
General
-
Target
OperativesDataSign.exe
-
Size
3.1MB
-
MD5
8e75208fa4545c555b6794461952ba0a
-
SHA1
1304fd9722249ed855b15fc4b9ddbd6074973b02
-
SHA256
ae2a41d750928fc9adf6ce62331ef42f7d4acc3d788a47ee5c7a26d5e06ded73
-
SHA512
109f04be753f27eee50764fdfcc5db294e9c84cb08723c6d900fb2b06f4140f2b6ddd31066608242d9e8a8dc1f9c372b2a66c9adde4b99e58de4b6528cd6a18a
-
SSDEEP
24576:gXnj9X4DGM/Z2xL5XXdu9Z/G/3Yz/AaKsPvRCZL/PZwGoKhQwvwD828WFxL5XXdK:49X4xZyH8GQreD7+mfDWbH8G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource OperativesDataSign.exe
Files
-
OperativesDataSign.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ