Static task
static1
Behavioral task
behavioral1
Sample
GitHub.Authentication.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
GitHub.Authentication.exe
Resource
win10v2004-20230703-en
General
-
Target
GitHub.Authentication.exe
-
Size
288KB
-
MD5
40cb27a804c0ab4109d99188534c6f82
-
SHA1
790622b354c10884504817f512dc8836c47d2755
-
SHA256
ee2f02e6188b5b3aca63ae83277cd9f1916d15475e65c5b6191d40992eb1381d
-
SHA512
0ea1a01b57a54dee7b16c8cfb61bff3d2ed6310c9371ca510a3d6d35bef14afb930f8fbfb9e8c1a5a37fef31d49daa0d9061aed262d27a39eb7de2780cfdebc9
-
SSDEEP
3072:xKu2UKaBXvtKW4dGgSEJ0IGu5pAwLBVTIOJ6MnnrE9C:x0UKaT4xsub4OJ5rE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GitHub.Authentication.exe
Files
-
GitHub.Authentication.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ