Static task
static1
Behavioral task
behavioral1
Sample
Extend.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Extend.exe
Resource
win10v2004-20231023-en
General
-
Target
Extend.exe
-
Size
332KB
-
MD5
cdab907fe5fbf5fe1df023a4fadb6efd
-
SHA1
927f8946f8170209e87ace1ea9c69761baebfc6d
-
SHA256
a8078a29708dd71328152891a0f089cdbaa14509d4ece588bf1516da4300b4c4
-
SHA512
4d5cb94ad724e91cab6b93257beb4f3dbc5be164a25813e6646129a12bb72f48fde9b08be7e9a9f2fb7748fc0fc76618a2bd96672aea6efe2534617f3df98d06
-
SSDEEP
1536:oW0jOsVzJq8Qp6dBRAVP6ykF5zMiJ1kaciYL/nWGxyW8IAw+1mL1A8xk:oWO68Qc1+P6ykF5z91ko4nZx/827PC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Extend.exe
Files
-
Extend.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 320KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ