Static task
static1
Behavioral task
behavioral1
Sample
iswearnorat.exe
Resource
win10v2004-20231222-en
General
-
Target
iswearnorat.exe
-
Size
43KB
-
MD5
cc24c73de2385613887dd09f77aa1e00
-
SHA1
4d4c3752e32eb0166f66d9a5af054daeb4d7c099
-
SHA256
39197432b4acc20f7ce436dd4de763136e1ec12c9d7457055ca10c9708231d0c
-
SHA512
87a02c5f5bd9b1a9c4f3651f57cc4cd652a0bdd65bd1b184497f0f9e7c79e8c21a18b4762f5f2403f7832983b09187b134b5c5e8f4f0d68aa79d73c082cd554a
-
SSDEEP
768:zsTGiMrU/HhZ86mEjTJfRUb029PKrFQlB6SGQYvr7WHo:zsIC86LjBGI29egolQYvWHo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource iswearnorat.exe
Files
-
iswearnorat.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ