Static task
static1
Behavioral task
behavioral1
Sample
RecordTest.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
RecordTest.exe
Resource
win10v2004-20231020-en
General
-
Target
RecordTest.exe
-
Size
12KB
-
MD5
2d24eefe1a62683c4092ba1334ad36b0
-
SHA1
d968e17cdb79a00a2c4ab6bb905bc216c8616a6e
-
SHA256
bac7483603b0c0773ecafeea7ed143b1fefe0dce1f7061794ba854e68614e306
-
SHA512
f13ad753b416e0a2feff241e6b3ea6aa2b155194b55ed6cb6223b4d1c1e7fc4b585bde6e13b94e6c60d0e0a4bdb6f40816123c259282add6760aa680592a4a77
-
SSDEEP
192:nfrawcFsWAManh1ak5g5shDYOYdJATz838Cge/aW:fWwcFsWAManfak5g5sFtoATI38g/x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RecordTest.exe
Files
-
RecordTest.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ