Static task
static1
Behavioral task
behavioral1
Sample
Name_Finder.exe
Resource
win10-20230703-en
General
-
Target
Name_Finder.exe
-
Size
11KB
-
MD5
75a9b7c1d08b9329ef6b0fa53a670b8e
-
SHA1
37cde6550f7dac695c0376ce78592ea4f541adec
-
SHA256
6031df0ed1c07d514b28654e56a4711a356616eae0891dea2f07bfc2455eae3a
-
SHA512
97262706e77f995bfcd16ec1d28c3e9baaab35e3c4a801786c5f8f796a7e35de9f6fd48ce5e56199bdcbde81c3e4ed33028dfa8dff1888582ce9df0b654a48d1
-
SSDEEP
192:dyr+DJqj/m9J9QBpFepsRN91Tj4aDc8S/x5m0mvTEm7sDDew3rr1o:0rW4j/mP9QHFepsRNvTj4aD2/x5mJEma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Name_Finder.exe
Files
-
Name_Finder.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ