Static task
static1
Behavioral task
behavioral1
Sample
Changer.exe
Resource
win10v2004-20231130-en
General
-
Target
Changer.exe
-
Size
948KB
-
MD5
fc2358964c00f3a5180c6ffc7d9c049b
-
SHA1
1a357e63d122b6e404b215a37085215e24b8c653
-
SHA256
0d6da99e8a707e8cfe7a39b2649950643a05ec10aa2efff2759f354172751940
-
SHA512
50fbbee68332fbce28cdf355756934855bae32091e7793cd21e6dbda15f985b2bd23bfb93b7f47f9c70a59335ce95ac17a08ef5da9ab9c7d444938ad1f9f835f
-
SSDEEP
24576:F19zgGzgLmf2PXfiDErZ6IJYtEoqh57GnAjRnPUn83m:F19zp6mePSe6IOu9h57e8RPvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Changer.exe
Files
-
Changer.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 938KB - Virtual size: 937KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ