Static task
static1
Behavioral task
behavioral1
Sample
11.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11.exe
Resource
win10v2004-20231215-en
General
-
Target
11.exe
-
Size
235KB
-
MD5
75bea9d07d50003bd0056c2b92ef9891
-
SHA1
59674eda67ba811d3fac3d908376756d1b239eae
-
SHA256
4ab8712a0b5877a40ffbe690a4421760fadd071c4b3949bc9c4b329e7a38b1a5
-
SHA512
16f989b8cc3244c772dfed24339d2e61c0a63cc4c573e53216fd0b95e3116134bb87d9b392ae11c0edc79ac97c38def02f7819450c3bb2f589e2d50b753bbf3c
-
SSDEEP
3072:nmkHdE+02qRIGYrP6OUHgz5dHtSyXQTxaxz2lJE2cWUQlaQMpjlaFKc:nJdDkcP6Oygz5dNVQizgyRjsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11.exe
Files
-
11.exe.exe windows:4 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lkvg Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE