Static task
static1
Behavioral task
behavioral1
Sample
easyMalicious14a7c34c086f.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
easyMalicious14a7c34c086f.exe
Resource
win10v2004-20230703-en
General
-
Target
easyMalicious14a7c34c086f.exe
-
Size
297KB
-
MD5
71ece9badf3ec7eab617d495bb94097f
-
SHA1
14286bf3ec114c5d254e0f2a1f4a68759a4da312
-
SHA256
8d9ec772918c5ee501d18852d93c32767053fbfe7e34a9c11886c1687c290ce8
-
SHA512
21ec5d71d3e5f2563f28968431e131c43a941e39df75675823d8111699b814daf15a6412578d32b472d00b674f155f3d526ce7520d7fe8c4ea5719c6cd12cd98
-
SSDEEP
6144:W731bdBaBHVzdddKaWA2Kj4DrzZ49rFTUd8UyvYznzXVpjU:c1bAGaWZKj0zZyrFT08vCj3jU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource easyMalicious14a7c34c086f.exe
Files
-
easyMalicious14a7c34c086f.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ