Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231020-en
General
-
Target
file.exe
-
Size
19.9MB
-
MD5
d6fac54c8333a6c35d40da85d2d0e463
-
SHA1
bf7c2c30462e33cf372a16d440d6cd4730e11711
-
SHA256
00d26d8524ce924c37cbccc10d05f829b39c03037ce1b3e4d5d265d8c2993b26
-
SHA512
b9e7a769d742861156c42e4747f85a9cbd3cd8353ab61841b756e5fa4804ba05d39b7ed43c9c0585e35f5c36b73ef235a5782c89e86a1c976317cc4ed679ede5
-
SSDEEP
393216:ZAInB7BUtpmFMgLRUB2k4SGLM0h26v4M9ZoMIsIsGPvbCM4Gf88qe:jBB2YO89SIM0cGoTJCJG4e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19.9MB - Virtual size: 19.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ