Static task
static1
Behavioral task
behavioral1
Sample
Screenshot WhatsApp_D43HG674.img.exe
Resource
win7-20230712-en
General
-
Target
Screenshot WhatsApp_D43HG674.img.exe
-
Size
1.1MB
-
MD5
f3869335b3ab818be070e918273aa4bd
-
SHA1
f134a2591bbd0641800db4502adffe170dc969a1
-
SHA256
7d1cb09a0fb3d30d8b4503fac7cbd55b30446cc92911eae44132f9debfb39da5
-
SHA512
291b91cea97f274132d884b52c17d4abb5e344f2e439a4f54ac508af2115a251eae3cff6bea8154e344f51e63e0ffb1ee4eae67a476c439435003cd526a36cf2
-
SSDEEP
24576:ix9uDAqvJ0Xc3XrHohBlTffC9Vt1vm1O16Sv3gM1rtFyEZoipjylH09t+w1WxGMM:ixoEqRX8hB9KVW1FSV1xFyEhpOq9tExG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Screenshot WhatsApp_D43HG674.img.exe
Files
-
Screenshot WhatsApp_D43HG674.img.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 973KB - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ