Static task
static1
Behavioral task
behavioral1
Sample
p_shellcode.exe
Resource
win10v2004-20230915-en
General
-
Target
p_shellcode.exe
-
Size
43KB
-
MD5
372d7463fc5b7ccdebe642ff55281156
-
SHA1
28cb32bd6432ea034162198237da7a2eb2a71bb6
-
SHA256
25b9c24f0a015869fe51d8d10576b9f34a4f7803f69d27610d37f6ab2ed52817
-
SHA512
3df3ce27a760e1d05242b99884bd7dfe034c3b2fcdb4e793f5e8e711f740c2260e63bb1bfb8aa324e9fd45bca78aa143635e64876f0766794fa306a5ebb76732
-
SSDEEP
768:dFlCviMuTeFcT16FyZEDxkdocyCKhhorfksiWYC+j6mIhUpLUpRIAqh:d+u++OQYxQ3pfksiWBVmIHpRIAq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource p_shellcode.exe
Files
-
p_shellcode.exe.exe windows:5 windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
foo Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE