Static task
static1
Behavioral task
behavioral1
Sample
LowKey_no_protection.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
LowKey_no_protection.exe
Resource
win10v2004-20230703-en
General
-
Target
LowKey_no_protection.exe
-
Size
591KB
-
MD5
f63882f3cc57990de43b031003b14645
-
SHA1
527ece41f65fee9ae257640b83b3ad2869f64ad8
-
SHA256
b7a6c06f663ddc3d60ce3e0fe3de23376e6d6209f11cca48e80a694562a500ed
-
SHA512
d081254c2af6ee2475f3a54f9cc063dd5be1b712c86ace01433d73c06f052aea8449a455e60316d98d7299d7cae06fb269e366822e123b8b75d39db356167de1
-
SSDEEP
12288:48gSh4MhbO9Z2FbdnUXjJe220kQyKrbQLybcZq+hHO92ql1lamVOsJ/Pd3CQbC:LysbO9Z2FbdnUXjJe29kQyKnbcZqwqlW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LowKey_no_protection.exe
Files
-
LowKey_no_protection.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 548KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ