Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.Selfmod.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.Selfmod.exe
Resource
win10v2004-20240226-en
General
-
Target
HEUR-Trojan.Win32.Selfmod.gen-6044386db0b842cbc7d2869ab8c64729b20cd57f0e5f515287cd3e07e3714f0d
-
Size
190KB
-
MD5
8ee56b83cf22100b9f8fe45c846a4d3a
-
SHA1
e60d7ecf4b4fd4ebaf2ab850abd664864fae138b
-
SHA256
6044386db0b842cbc7d2869ab8c64729b20cd57f0e5f515287cd3e07e3714f0d
-
SHA512
0500fc623036f8cedc717623d70b9470e34a642ad45f072716f793eba17add8c5a5ebeedae5f071548f52123c6c39ea68290ef0547ffa6f8775e422da0d564c9
-
SSDEEP
3072:T0QwTKZO+AZbh4ixkq3VAJ9Z/Klk6UXh4aDm7LMqBOQc7dRLhEXmu5qU1cLTBkr/:TkKZO+A/RkOa6UX1y7LZBOQQjLhEXNsG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Selfmod.gen-6044386db0b842cbc7d2869ab8c64729b20cd57f0e5f515287cd3e07e3714f0d
Files
-
HEUR-Trojan.Win32.Selfmod.gen-6044386db0b842cbc7d2869ab8c64729b20cd57f0e5f515287cd3e07e3714f0d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.pdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ