Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230621-en
General
-
Target
file.exe
-
Size
378KB
-
MD5
668ad90567977ff58c1bca5f5bde92f7
-
SHA1
6c45d0c531b0ebc8d224e839821bff1ec93cf269
-
SHA256
1201be819db6d09ce9bd23656c5bbd7430e0420f30c39afe37b3a4662581f143
-
SHA512
9967be3b5934585aa5551fd615ba8c9566e24bc327a8ad00b73c6fc12b63e8266a847110ee91eed0d8532d1c6d0b8631153ebc02e29a99c9e0f3168007d81d03
-
SSDEEP
6144:7AmPuLAbAkYWRDFqz64MThoIIkOhW9mJxRcomeIDJ5V45gfFXEAobU:7hiAvYkkW4MmII1ZBmvJn00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ