Static task
static1
Behavioral task
behavioral1
Sample
filehistory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
filehistory.exe
Resource
win10v2004-20230831-en
General
-
Target
filehistory.exe
-
Size
435KB
-
MD5
95a3e53ba7094c0c2304bbe861eab0c3
-
SHA1
25768f80fa84c6b95eaa038596d6531705af8567
-
SHA256
ffbebff62cd379de2353993c6288fb3df58cf5ed3fec233d88edfe95d31931e9
-
SHA512
d3842a4351608770f161cee67f40a8b1c8d1e1803f22e2eb454ed4e1f5a5c4281b1ab9858b57d993947c3217ad6adca38f8e2722bbba7187caaf806d3ab5f4e4
-
SSDEEP
12288:n29dUoYEtg7iNjp4OpdDV2TzSMrvIINlMdY9v8vrgz:GB3bV2uQuYt8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource filehistory.exe
Files
-
filehistory.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 433KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ