Static task
static1
Behavioral task
behavioral1
Sample
gimme.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
gimme.exe
Resource
win10v2004-20230915-en
General
-
Target
gimme.exe
-
Size
5KB
-
MD5
23c2ed8d2380e21bbfc0729d3ed25ed4
-
SHA1
57a9613c87052b961a49c6c60f18ece7f063a58f
-
SHA256
ceadf5599264c3756fcc20d902fa85b45e47bce2dd2e28ed8ae065f73904238e
-
SHA512
8bf5bc4c958408ba2c0851028d6de48f8ddb96fb556855fce6be9e1906ecf4c9e24ef6d2fba37a3e63e006eaa3b29c256adecc2fcfb351f19ab1f3e1f0de2647
-
SSDEEP
48:62db4qYxzHdxes0MU1SqX2eHoKb1Mo5ZR+eY1hlsKkVIz39DeXbPfZv54tMtflXk:ztkzHdoSUR2k+eYflrkVIAXRl9rzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource gimme.exe
Files
-
gimme.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ