Static task
static1
Behavioral task
behavioral1
Sample
native.exe
Resource
win10-20230621-en
Behavioral task
behavioral2
Sample
native.exe
Resource
win10v2004-20230621-en
General
-
Target
native.zip
-
Size
376KB
-
MD5
cd6e36a728a4b3c905411e3183b155f5
-
SHA1
385eb66d7f1bb09c27c4b148b54098237ba34560
-
SHA256
9fbcaa5b94089226b30d8a05303a3d3ad5da4ee7e5a2d3366abda4bab8df75ca
-
SHA512
f4b93626e29eb5015fb40b5717d1936f8cfcaf96e47846b2c096b1bb0643c55bfe3b458f78116c1f8c37f7ccf0c83f27a86792b3a1cd3420d9e70595c64da6bd
-
SSDEEP
6144:UfLfyCkc9OJXr+dww7UlfWX9yfZFalXLekYXePDTJO6ZrFmqwEx0OOVyxwi9/xR5:g7X9gXawYX8fZock0ePv74jEx1eQf9Jj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/native.exe
Files
-
native.zip.zip
Password: 123
-
native.exe.exe windows x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 531KB - Virtual size: 530KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ