Static task
static1
Behavioral task
behavioral1
Sample
client_out.exe
Resource
win10-20230703-en
General
-
Target
client_out.bin
-
Size
675KB
-
MD5
8a74caec343038e5e019a2705617c27b
-
SHA1
30039a90098cf3ff341581e8f6992f1e053954d6
-
SHA256
643715600225bdf3136caae1e2a79efe9683e3fb9bcd66bb2e4eb46aeb2ebb10
-
SHA512
6cf594af54999ed701d03065581e5fc03e223c935060ecae6b593fb1598b4c97e42572787330450f06eefc6081d9decb330d494f90ce1e4ad54f39208e57fb3a
-
SSDEEP
12288:CUu89j80zfhdanLY+RpVsWXd6HO8Nq+lDHWPNzAgs5SVzdE4e9m/CzCjnH:Ccj80bhdanLY+BsWXkHV0eDHWPNzAgs0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource client_out.bin
Files
-
client_out.bin.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 673KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ