Static task
static1
Behavioral task
behavioral1
Sample
filehistory.exe
Resource
win7-20230831-en
General
-
Target
filehistory.exe
-
Size
434KB
-
MD5
f1ca846aad692b742f5d892f09d510c6
-
SHA1
c14a9eafa7d3d96c6d6db03a3528a4b392d03268
-
SHA256
e6ee8789c893dd846f2537ce86ebf2b039c7e8c0e0450c7379a3601858a1560c
-
SHA512
a97a5a60ab8933b81fea74a483b94edeb91247d89ce59a0460d82df4b645a4cd9ca7b4c54c63e2a42b6e49a69c39a94e5b915354d2c20aaa390429a5ba7b5a7c
-
SSDEEP
12288:l/4i7HqzauGOz7+mszjFqqUC1PBa4yyXU:lYujv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource filehistory.exe
Files
-
filehistory.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ