Static task
static1
Behavioral task
behavioral1
Sample
a.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
a.exe
Resource
win10v2004-20230703-en
General
-
Target
a.ex
-
Size
359KB
-
MD5
f55698d82be20d245e141a8f7c19928e
-
SHA1
45c6a6475d7894b637cf9c74c9227b976db18f24
-
SHA256
f43dc24a6067339b69d032441ce7e2632e1770361dc33708de46cff9de25475b
-
SHA512
e95f681e2bc62ddc6fd98f5e429029e10571828a82814dfd819543ca475fe4d54d2e84cf3902a26052d97b13f0a3c88fcfa2df65b6c29223af0fd57aa34577c6
-
SSDEEP
6144:lQOZ6ys9QMtTHR0FNaXOyMDw+Nc8ntC+ygTRFqOA:l9Z/MtTHR0yXOyMMUfncE7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a.ex
Files
-
a.ex.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ