Static task
static1
Behavioral task
behavioral1
Sample
Verify.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Verify.exe
Resource
win10v2004-20231020-en
General
-
Target
Verify.exe
-
Size
93KB
-
MD5
7730a58934885058d79583d2c600cf2d
-
SHA1
2f7fbcad87eb0d269f5b4c5ef372cb141cd83123
-
SHA256
61a84f09d618b3f4c9912e3914cbcd6f318b99d04795459b34af543f758a1dd0
-
SHA512
827ac1ac02aebb16172c7bced463d971451f27fd5de5c75f3f6847c9c0e091ce87c94998359f9a7f026ac2fa5d6290982f0f9da665deee8d81d6911338be0b9a
-
SSDEEP
1536:cAadqV4ilaDB20CSFGCiI/vNc89tt6DH:/akV4iol2R2Ndtt6DH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Verify.exe
Files
-
Verify.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ