Static task
static1
Behavioral task
behavioral1
Sample
iswearnorat_protected.exe
Resource
win10v2004-20231215-en
General
-
Target
iswearnorat_protected.exe
-
Size
383KB
-
MD5
1dcbd8baf91aeda8b95e979e73fa4cd3
-
SHA1
db256a4be2920af434c158d4254234e6705eab87
-
SHA256
209443e51386eecca6a3fb06044f99f711a4a6511017bc47908b6b94788d3912
-
SHA512
50433e97a94da9ab77538ad5ae8207396198676d266d3fd6933e97ca7baffaa5c05cc2002761b811ad3f9609aefdc2930596a9ed245df0741a8154de74851e20
-
SSDEEP
3072:qJf/TgpBYkfKFzO/MJXNiLtxTK+/HKa7mnMcfzpb2P/:88pBY1wJtxeCHKayMcbpby
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource iswearnorat_protected.exe
Files
-
iswearnorat_protected.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ