Static task
static1
General
-
Target
SAM.Picker.exe
-
Size
55KB
-
MD5
6dc577f84f8277c0f8a4d9ea304832ef
-
SHA1
59a2b89a4cf34a56b5cf9443cd32d9e198b998e7
-
SHA256
71daeb8b159145e722f406b79c8d0fc3414c5a32fc5cc9244763dd487bcddf50
-
SHA512
9b07cd73355bd8aa870465c6c14e19ae941e1dc914547d56458affb69de3990dce8fa959b836fe6c57718dd3f7d893ab43999507f4bfd7772afa74c3b55e4ae9
-
SSDEEP
1536:RMYncvjMtgja5jjOF1v/bVgnMrF1v/bVgxr:RMYcvjLa5jjOHvpgCHvpgxr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SAM.Picker.exe
Files
-
SAM.Picker.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ