Static task
static1
Behavioral task
behavioral1
Sample
win.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
win.exe
Resource
win10v2004-20230703-en
General
-
Target
win.exe
-
Size
213KB
-
MD5
c0e88be9b83acf26d8269f07fe927f5c
-
SHA1
6f35b6b10fbf777d61df5c195fa6bf79251683e6
-
SHA256
576ef869c72f3afe6f4f5101f27aeb0d479cae8e5d348eea4e43e8af8252dfd0
-
SHA512
2b98bd74ff21c0e5aeaa6f8939c6e3b273c6ce864e85a58e660f15ec07daf5aea225dc56b56ccd46998c67f9b95550001297a5b0492775f7cc938e4ba4eb4118
-
SSDEEP
6144:t9oWWDUY7ddgXEDnSKiGw4HjYUduMkIdDSKf+m7AJ0H7:t9oWg7d+XEDnSKin4UAuHIdDVf9vH7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource win.exe
Files
-
win.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ