Static task
static1
Behavioral task
behavioral1
Sample
File02.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
File02.exe
Resource
win10v2004-20230703-en
General
-
Target
File02.exe
-
Size
466KB
-
MD5
d0c2b346f80272ef97431b4ae0f4dcad
-
SHA1
dc8143f1200f114e50351cec1e8468ee71968515
-
SHA256
fef77bce2610ac119ba3995604d5d9f46fe2cc4f64c60f9f0168e5346113ce32
-
SHA512
f26d7e22c444d5978ebb894fbfe20fd5c7f0c8a0823f82c4ce971f3de5994e14924e092751026608a8ee45a1ed089c03dbdb7d85da775882dac18586c8b48399
-
SSDEEP
12288:bBaEnOFufB+oRJ2B5wyGNVEwLlMVry4CTsp:bMEOQfkoRACVEwQry5Tsp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource File02.exe
Files
-
File02.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 464KB - Virtual size: 463KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ