Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-00062cf38c3b3d846a70315f37a3edca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-00062cf38c3b3d846a70315f37a3edca.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-00062cf38c3b3d846a70315f37a3edca
-
Size
84KB
-
MD5
00062cf38c3b3d846a70315f37a3edca
-
SHA1
41ce956b969ad84880fb7b2b48ab851ef72392aa
-
SHA256
1882d5e9ec473a80a4548458443d79537a6e1c315bcaf7682dd9d82e01b23b24
-
SHA512
298e10ba3ea6151fbb3a90e464844de472f00f7458979081b69240887ac375c63e8757f8c7d1f918ce52812a8214ff8096a209cb608e16637dfce9d24f3af603
-
SSDEEP
768:XUbk5enfQQwaDfUm1L7adY9k4HsknmdVP8LN6YWQbnLaSvsc9mAB2L17lR9aYXO:Yfvw6V1nlRsknmvPSbL3kc97C7taYXO
Malware Config
Signatures
-
Detects executables packed with MEW 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_MEW -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-00062cf38c3b3d846a70315f37a3edca
Files
-
VirusShare-00062cf38c3b3d846a70315f37a3edca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 50KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE