Static task
static1
Behavioral task
behavioral1
Sample
Iswearnorat_protected.exe
Resource
win10v2004-20231215-en
General
-
Target
Iswearnorat_protected.exe
-
Size
473KB
-
MD5
907c804906ab77ab08f9b5260eb92a06
-
SHA1
fd7b3a96f859e937b6aeb2e86d6fdfb95b0748e8
-
SHA256
6b8fed9673da0b07a2d52d65feb55604680d7b6cfe2a23b3f7f7a15ed357873c
-
SHA512
39fbf1085c158811eceedd5f0d647fe0c222e884fbb4c5f070fcdcab3325fa012b120618e4e7b485c1716952dfac31e19b4f8fa2076b949eda052aa08b089fb9
-
SSDEEP
3072:C9qotmmDVY1wcHuKe5L4XX45fZlTgHWU06ujmFgUJeOiEbwFf6:C9Jmma1wcHuKe+X45fjTgH+jzUwfEbq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Iswearnorat_protected.exe
Files
-
Iswearnorat_protected.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 471KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ