Static task
static1
Behavioral task
behavioral1
Sample
ThisIsWin11.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ThisIsWin11.exe
Resource
win10v2004-20231215-en
General
-
Target
ThisIsWin11.exe
-
Size
327KB
-
MD5
8f92b938cd71774ab2aaaff4fade54eb
-
SHA1
2763a90ebc3d4838a3d75197286abbf7cf4ba9f2
-
SHA256
41dfbdfe2084d61572bb8de80d90900960592578e434b10f944f25369f13350d
-
SHA512
4a88ad5f7a70b0ab6c0bf04d7815a0fd18429dd90309790166eba8070588600aba0ff4a8826fd8fbd8cbe0a66510eed389e9d4bb3af6534a37962d5b1c752f39
-
SSDEEP
3072:TsctcIL0NJVY6ACBCbPBnvi+Z78iCQ1hXE3Y4EThp8KYjRfJs/gx:IEcXDYLbk3sNg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ThisIsWin11.exe
Files
-
ThisIsWin11.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ