Static task
static1
Behavioral task
behavioral1
Sample
sm64pcBuilder2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
sm64pcBuilder2.exe
Resource
win10v2004-20230915-en
General
-
Target
sm64pcbuilder2.zip
-
Size
1.9MB
-
MD5
4bd07784909dd32aa854c24e3471521d
-
SHA1
acc15247cca68914bcad7c6b16351248a79b524e
-
SHA256
ec2557c753698241a3e3533b3a3477b49c83bb0253e5d80f023c29d585d5c01f
-
SHA512
9ddeec6dbab562614fec7229535335000e7122a874d37f39d45afd7228459d1b6b1a539243a38630a5444314cb912e505108c09c3ec3065f2ae2d7591878c48d
-
SSDEEP
49152:Unf2wyFwJGcRPwxOuC6CJaWeyBYx6PXTkxyF1vZTbqq+:HJFqRPwxOjJaWexxHEF1N7+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/sm64pcBuilder2.exe
Files
-
sm64pcbuilder2.zip.zip
-
sm64pcBuilder2.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 456KB - Virtual size: 455KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ