Static task
static1
Behavioral task
behavioral1
Sample
Easy_Malicious_087c86cc76891bace2777cd89c30ba3249350393d408a0e1f7be8af44f695e39.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Easy_Malicious_087c86cc76891bace2777cd89c30ba3249350393d408a0e1f7be8af44f695e39.exe
Resource
win10v2004-20230703-en
General
-
Target
Easy_Malicious_087c86cc76891bace2777cd89c30ba3249350393d408a0e1f7be8af44f695e39.exe
-
Size
1.6MB
-
MD5
9498d98ae9982b1b7f3b87ff70c676c8
-
SHA1
3d3f109d8d927f5b3a173a308944a692173ec1bb
-
SHA256
bd644b92886c0aa71f332acd0d0de375a06a2a813435214465bddc0ced577440
-
SHA512
9cb77d760add511c827d7f49c3bd810dc4f06d6b40a48c5c15b9148f75882798f64df73d2f41e7c98dcf74970b02a9751fa7cce9421c9379f40f5d456671fe93
-
SSDEEP
49152:cmWLSepeaHy0so0p5ZOhjcD3QoiMG2fnaAK8ArTd:XWSsfSRo08tcDQ3j2faADAN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Easy_Malicious_087c86cc76891bace2777cd89c30ba3249350393d408a0e1f7be8af44f695e39.exe
Files
-
Easy_Malicious_087c86cc76891bace2777cd89c30ba3249350393d408a0e1f7be8af44f695e39.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ