Static task
static1
Behavioral task
behavioral1
Sample
word.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
word.exe
Resource
win10v2004-20230703-en
General
-
Target
word.exe
-
Size
36KB
-
MD5
5bfadcafa18669bc2f9205ae510f8b7f
-
SHA1
537e0cf5ef69720bcb6e0034805329849a068469
-
SHA256
e2f52c32581583a890b8751c4e584d478b4e81891a6c08f60818e35127712d0b
-
SHA512
886acb250ce8639780734507fa26b4922ebd33b882d5ad0d221bb4a48086bb9ab18be087955e69c18c7e61438aaabfe9291780583f45aad7619356fbb26c915a
-
SSDEEP
768:+JQMWc5Mq5Tllmu24Ra2DovIieNhIPVQPa94Ks:qWc5LTll92m7ov0oW64Ks
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource word.exe
Files
-
word.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ