Static task
static1
Behavioral task
behavioral1
Sample
indicat.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
indicat.exe
Resource
win10v2004-20230915-en
General
-
Target
indicat.exe
-
Size
1.5MB
-
MD5
3420f88a3572375798ee4493c4033f5d
-
SHA1
ed0a55e9cf84a74fb6fd5d109181bf45ef6a8213
-
SHA256
f09215c0d842233511585d034e0a7c2c9a4bacb9502b2a3437a138817cb9424c
-
SHA512
24bec921881ccb87115435155c27df7ca6c703d4b45ca375e2eac37ca78045b49e18ed80a3db126559a68d66248d1f14d354c8b7aee738e4baad89fcaf8c47d4
-
SSDEEP
24576:KC9lNunnF6EuTfPyqJhx/foNq+jAspbFX2ptypx55:ZNuFE6qvxZGAAAfypr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource indicat.exe
Files
-
indicat.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ