Static task
static1
Behavioral task
behavioral1
Sample
H.exe
Resource
win7-20230712-en
General
-
Target
H.exe
-
Size
372KB
-
MD5
bd675ef1c7af89dbf58586d7ab8f9e4e
-
SHA1
1c09735bd573012a13454eefc12d8e9f259ee892
-
SHA256
c9d03cea9fb9c7401c549334542ff9ee5cc09d23929dd8778e5fb46fc7db2367
-
SHA512
f9f202162420106f4f473cee5e5a36815096378b0656f90526c456ba0711398f959426c9d8f7d4a127d46187434c701337c1c564bc1d2339f16a3cab84bba7ec
-
SSDEEP
6144:9hS8o06ePaeSxSUHBPFMp8ZMQL3GTQSuP3DPYjqExy8CxRfTGMXG7F1d74X6z:9hejg/WS2PFMRQa0XzPYGMC5PW7F1w6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource H.exe
Files
-
H.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 370KB - Virtual size: 369KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ