Static task
static1
Behavioral task
behavioral1
Sample
dropper.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
dropper.exe
Resource
win10v2004-20230621-en
General
-
Target
dropper.exe
-
Size
10KB
-
MD5
0b75660ca4efff7297656199e014fc21
-
SHA1
bc76ee1ebe3b5dd0b331873a1e381075fdf997c0
-
SHA256
28858a7700e27278914d8356caa0be33ddd04ad6a4a8153b8e610fb4023fdede
-
SHA512
396706fa07293ace89424d1801749377c85cf228e49f6a20b90b1d10e938a3a15c1b3aae5d1ec6f5b686dc633b43213f6bedc96415f50ea7fd8ed7dabdd18b1f
-
SSDEEP
192:Z6U2mnEE3UfgzaRnKJvnlgMrEugCwXsW:jLnEQzaRQ6MDgT8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dropper.exe
Files
-
dropper.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ