Static task
static1
Behavioral task
behavioral1
Sample
remove.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
remove.exe
Resource
win10-20231020-en
Behavioral task
behavioral3
Sample
remove.exe
Resource
win10v2004-20231020-en
General
-
Target
remove.exe
-
Size
179KB
-
MD5
edb3dae112b1421b76cca5aa5156b9c2
-
SHA1
0fde6a02a3446f92e88d52df6c659f594fba0971
-
SHA256
c77c9d2987b550c9e265b6aca28dcaef5e8deb3a6250efc3db67b80299572b2e
-
SHA512
1a2bb83f4c12b8868b782e8795d0a6225de4d8e50d105b464299764d50055002615618b7e9b248604038c47cbcedaec3862187cb8d2b872c87df6f9fafc6cff2
-
SSDEEP
3072:JCANO6zJtIINy4PaX5CV4sXmQUck+e5NDx3ZXtEdcdyHd8:cgO6zJxCo4sWQNcx3vEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource remove.exe
Files
-
remove.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ