Static task
static1
Behavioral task
behavioral1
Sample
Test App.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Test App.exe
Resource
win10v2004-20230220-en
General
-
Target
Test App.exe
-
Size
15KB
-
MD5
adbd62ebe71c5d1929be6fd26cb65df8
-
SHA1
a1f7f6da0b7bddeb069fa3a86b9263de4e05f428
-
SHA256
7ce245c367b7d6e0595b64affb5703109d889a54b13b6292d396ac71485fcc71
-
SHA512
21db19c8a6c1164d3bedfb0215cc2b73179370fdf9153fcc3fd0b985fdc6dcadcd3fda4fd819f2c736d2e9d52381a804a6db3e2c19ae505b271f510b6af45257
-
SSDEEP
384:uQEJTKRi3Pt1RtL5L3thcMwH2Ja0adlujHqfFc:RcTK03l/LU2g0adojHJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Test App.exe
Files
-
Test App.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ