Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231129-en
General
-
Target
file
-
Size
8.8MB
-
MD5
ff9a3ddeb084105a6c7e597003788d7b
-
SHA1
2014faf33c80fd5a5a187c99a202444263445dd0
-
SHA256
24ca31f5b2c38b141f0c22d7f6fdf6cf558c24840cf215fafab0f337afa4bac2
-
SHA512
487cda020eea7147131af9638c22b76a3af4cd38abc47099d12bacb5c32c1e6e8af62c29116bb50d412a2435615ffc86a3e367b731edfab9680acbbfedff801a
-
SSDEEP
196608:F9gv762c8AZv5+hIvbQGwCDlj99UzU4rTDweAFmFdnMcHgnuVul:nnx+hoEG3JEzUyDweAArtAP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file
Files
-
file.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8.8MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ