Static task
static1
Behavioral task
behavioral1
Sample
template_x64_windows.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
template_x64_windows.exe
Resource
win10v2004-20230831-en
General
-
Target
template_x64_windows.exe
-
Size
6KB
-
MD5
af2c92bca7e79ddee0afc441412ed739
-
SHA1
80780c29c33de431c0d6b1827fedd4387dcc619e
-
SHA256
43e270dd0554951791f8486f78c569647de0487ad57d3c616e68029c5dd6fdec
-
SHA512
07cf941aaa492fd04d6a00744a066174c45af11f9aa5adb1962de5f418f3faaeb133689b1e7845546a26e34d351ec86e22022129bbc9b2147c1e0609cdd38495
-
SSDEEP
12:eFGSG+CWrTgU9ueZluLy/H2gxniGMaGBQAV:eFGStrJ9u084WgxnZdGBQAV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource template_x64_windows.exe
Files
-
template_x64_windows.exe.exe windows x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ