Static task
static1
Behavioral task
behavioral1
Sample
MIT BYPASS.exe
Resource
win10v2004-20230831-en
General
-
Target
MIT BYPASS.exe
-
Size
45.2MB
-
MD5
d186e6d0b0a70afda44c984ff67eab44
-
SHA1
ed7c293d5c034c032423cf96743bf80e9197092c
-
SHA256
16a42d2c902ffc0b371be1619069c89ef9ef11860bbb5f25f9ceab7745c00ddb
-
SHA512
811fceff4b203c8130e298ed92c030f1581fa8627abff4beb5ad9f945f3f75fb4fb5162581450eb14eb14cda45c46ad499ee244a1cb3fd837946e01540fc8147
-
SSDEEP
786432:Upyvvq4JmKI/TiRj/g+2T1TdMKTnsBWU89cS866KgtbNbNoISjiBpu++V7ESb+V4:MRGdiujWtdzsMU4cHZztbNbNTXp9+lb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MIT BYPASS.exe
Files
-
MIT BYPASS.exe.exe windows x64
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 45.1MB - Virtual size: 45.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ