Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
General
-
Target
file
-
Size
598KB
-
MD5
974385631874e63055137f1b0e441eb6
-
SHA1
67d7cde0fde6bc8b39b242713d403b82079470c9
-
SHA256
dc94a603e996002fac39bcff717525d3d442ccaf78ab97be26b588275e8f2a4d
-
SHA512
c2ea3006db5b9a240d10a2b630d57139ee7e7e8a268589a56a58b6112391cd71b95333f9eb2c4b8a5bee5cbb40084aba80eebb65617f5d2efcba5a84f96c520c
-
SSDEEP
6144:PGpx9dauOriOU3R/ssEQueTqlJ+h2aBqMjR7u/QzmooARiXCFT2Fp6SQaofZAX:cdVDTqlJAy+RrFT2Fp6SPyZW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file
Files
-
file.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 595KB - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ