Static task
static1
Behavioral task
behavioral1
Sample
MesSec_protected.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
MesSec_protected.exe
Resource
win10v2004-20231023-en
General
-
Target
MesSec_protected.exe
-
Size
1.2MB
-
MD5
5214987a502de9ce5168198344527c4f
-
SHA1
91216f1e1277b4144f33ad5350e39b297815f611
-
SHA256
74c875c2e518ff3bcb79a5dca49aa98c049191028e49612e1840b9a14743bc8a
-
SHA512
e95786e05547a64194923b9b2398e32d4be63d582e7262be71294c8e3d7ca1d9e0e4e72b7e12c360520b043fd431a6a4926550c07089c5c8b2f83f10162900fc
-
SSDEEP
24576:dqyrGEJ/hymf4UD5VYUEO3/CYZGm/xFB7TSiAn7d79XbY:04RJkm75v/CYI0xFB7TSBbXb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MesSec_protected.exe
Files
-
MesSec_protected.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 99KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 929KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE