Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230703-en
General
-
Target
file.exe
-
Size
587KB
-
MD5
2dde1f40af3beb9d252cd0c2ea8cc26d
-
SHA1
784fc5d7b1c3da035305063c17cabc4db600c35c
-
SHA256
8fe82a75e04b5862cc442c52304af1f710b24cd13138739e94559fcb2e0a4da7
-
SHA512
1063c59beb8d76a10386c3ca1fba3b32593e85fe531d3ba498c3d7c402ffa4869bea51488d1fdcdba42f691b6af4566e7fad261c4260c439d229e89505123c90
-
SSDEEP
12288:JL8wdmnqfZA+uppEt+bhAbTG/yEbAK/O+0tiTb1s:V8wdCqfZWpOt+FAbKKEbS+00+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 584KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ