Static task
static1
Behavioral task
behavioral1
Sample
easy_Benign_ffc48f7dbd494165b2b132b895700707d4ff43760d9ec2eeddc8aadcefe5a6ec.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
easy_Benign_ffc48f7dbd494165b2b132b895700707d4ff43760d9ec2eeddc8aadcefe5a6ec.exe
Resource
win10v2004-20230703-en
General
-
Target
easy_Benign_ffc48f7dbd494165b2b132b895700707d4ff43760d9ec2eeddc8aadcefe5a6ec.exe
-
Size
6KB
-
MD5
80de97093381892cd4b4d47cfe3c20d4
-
SHA1
6e1dee0892fd9fdef32d10e73a33b7704071b1de
-
SHA256
ffc48f7dbd494165b2b132b895700707d4ff43760d9ec2eeddc8aadcefe5a6ec
-
SHA512
4d6044ef9c1c63af691ce0dfb4805aaab74334129cb81b81d0469adadb655768a083fbdd2a6c73342f722b00dce1e9ee6128dfb95869773cea488e274c7ba3af
-
SSDEEP
96:14QFs/XUcYRUDJkmsRIwZU8y8K3LzDAMg:14Is/UBRUDJTsg8y8IvH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource easy_Benign_ffc48f7dbd494165b2b132b895700707d4ff43760d9ec2eeddc8aadcefe5a6ec.exe
Files
-
easy_Benign_ffc48f7dbd494165b2b132b895700707d4ff43760d9ec2eeddc8aadcefe5a6ec.exe.exe windows x86
10a1a8439b581f744a2ea42c73d24e3c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoVolumeDeviceToDosName
RtlAssert
KeTickCount
DbgPrint
ZwOpenKey
RtlInitUnicodeString
ZwQueryValueKey
KeBugCheckEx
ZwClose
hal
KeGetCurrentIrql
fltmgr.sys
FltRegisterFilter
FltStartFiltering
FltUnregisterFilter
FltGetDiskDeviceObject
Sections
.text Size: 512B - Virtual size: 294B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 1024B - Virtual size: 533B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ