Static task
static1
Behavioral task
behavioral1
Sample
254.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
254.exe
Resource
win10v2004-20231023-en
General
-
Target
254.exe
-
Size
1.0MB
-
MD5
18b5a3979e5aa0d56507d4252b3ec4a5
-
SHA1
a17792747a8726a826bf205add9d02ae6d88f8dd
-
SHA256
5eedc867cc1039d4aefce6dc1fc6835504a94627f3ce35012afb5410c11e4ba8
-
SHA512
652ade77637efb0344237e9f4ce4205ac541f2ce19bfdb28baaad27aaee30aacb4b0eec87cb08d368bed9cf7218655940d852fb9cb4579f3eadcdb50993d9fed
-
SSDEEP
24576:hO08q/76M7mdCWMqHWh4siWb7EYbWmECyrf4R3KMrF:hOi+e3fJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 254.exe
Files
-
254.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1022KB - Virtual size: 1022KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ