Static task
static1
Behavioral task
behavioral1
Sample
malware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
malware.exe
Resource
win10v2004-20231215-en
General
-
Target
malware.exe
-
Size
11.7MB
-
MD5
2cfaae71180bed1ac9bc15a298d21308
-
SHA1
71d8059eca3016205926a7de2619bcc41e3137fd
-
SHA256
9a6ad556659f99c16633bf7ee238fae030f7c6e8221c0ec98dba4d803dbd0ca2
-
SHA512
b4282fa0137017d76ebc26fc49813ba44531b63de3097675dd7219094992ecafd5694a255ff560d75cd71d3a951f07e4ec03a4bcdcc2f956a85d70a5cae379e5
-
SSDEEP
196608:ImqHqX9e5kXy6Sr/MrmeYpiqj0XlJ2PsVpiGkfR0QsAAA3AFr8tJGGtmERl:ImNUJrkr8piNXlckuJR0Qs7A3AFrk5me
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource malware.exe
Files
-
malware.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11.7MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ