Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230621-en
General
-
Target
file.exe
-
Size
9.7MB
-
MD5
054f9e063ea94e199a42549dc1da436c
-
SHA1
482c349671cbf2d9f2beecc47c90a1429e9433f6
-
SHA256
5cb9717a04cda4e2affebca598a9a2afcfe7f6e45b7544b9bbb9b6893540a111
-
SHA512
ce3def3f58fda011b64e3972c7f15ac82b88fa619b4c52c91c82b8d050fc8430e439c292639d55f0b58431d749c87b04aa9258743984586ee18e00116d35144f
-
SSDEEP
196608:qtuUUmcmuHmpUMO1+Tcyi8wXmJaNPMrJbJsO09FD74KuAzYsm9fKaQ:qCyKMWCNi8wXmJ1YO09t74KuyYs+O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ