Static task
static1
Behavioral task
behavioral1
Sample
PEiD.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
PEiD.exe
Resource
win10v2004-20240226-en
General
-
Target
PEiD.exe
-
Size
214KB
-
MD5
4b5289d1dbd727c5dd0e247a7d7db03e
-
SHA1
bff141822aefd08fa9b7e17684934ed8ca1a3417
-
SHA256
e13171d50f45a79bc09b9e4b9ffa38eb02301aca94a1867a9bf8acccc3759030
-
SHA512
d9418516a2c2caaba96799c1f0368a41eb347e8a27843629e14fb33ce1a3d47b35ceea8d3d9d25588dc2353894845d4b7d6fcb42f1c2e744d5a8aa784b581225
-
SSDEEP
6144:teB/6F8/8+KGf+oUVBDyM3cLpXVYYCimgpPmfgN+:teB/WK+bBmJpXqX+BN+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PEiD.exe
Files
-
PEiD.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
snk0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
snk1 Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE