Static task
static1
Behavioral task
behavioral1
Sample
StringCleaner.exe
Resource
win10v2004-20230915-en
General
-
Target
StringCleaner.exe
-
Size
11KB
-
MD5
85fa7fa3c6c7be30a03e4c4ab356fffe
-
SHA1
2f6ec39f5bc7c604719bc88cf2a1cd52d93e1259
-
SHA256
7428e1475490472f18c90fe7a419bb16f52ba2d6cb414f4e2d1cda40a8737974
-
SHA512
1914eeb057b9546a3ed45ef69f272fb711d72ae000bd1b53234096fef42e778fd9afbde38a1e7f4e722ad3b024fdd489c1be961dc2e4540addc0fb1b80cb0fa1
-
SSDEEP
192:kTnarCpSWL2HF0IgiJ90pNWLyypcWLZ2zSMvopGkQXjUiVGfzSzvAzmpjUXNRaHR:OCCpSWLcF0Ih+pNWL1pcWLkd8GhUi8fH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource StringCleaner.exe
Files
-
StringCleaner.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ