Static task
static1
Behavioral task
behavioral1
Sample
a.exe
Resource
win7-20230220-en
General
-
Target
a.exe
-
Size
4KB
-
MD5
c4ac660683c1d6af015e7131d4b975c8
-
SHA1
e15e5409fd371043bc7961ebfc82e7e0f0553d47
-
SHA256
cdee0da4b46f9516cb013c7306bf3f4224250abea2d8e3d2b5f05324a5119026
-
SHA512
43d0b44c2702a8b268b4b736b426184a7e4324e040cf6b6e67a33200ffbd06c5e46bfff685b405d6e7cbb1ba623ab069e27077a747277bbe75426ae4283a5b4f
-
SSDEEP
48:6RTcwUzi1dqVgJ2Sb/IWKpR9XOulavTqXSfbNtm:gcwUzi1dq2KpbJsvNzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a.exe
Files
-
a.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ