Static task
static1
General
-
Target
-
Size
121KB
-
MD5
9eda69bc6d42ff0a9a56d74fb06a6c01
-
SHA1
6a384ff0d66089bfb89dbcad8f0a90482160c6a1
-
SHA256
34b9f323d2c6d4fc334952c365b678662dbd00cdd03babbcbe258a0ec053ffa3
-
SHA512
d192d9adcac22f429478b82e9acec92a1d1a9c2cfb65cb6e525443b5be1866baadac345f7aebe36f75563ffa05e096b09a94c9b30665336f9c82576e4efeba16
-
SSDEEP
768:M3SOA2NuHRZR4EnzsbQU4nNaFAVVnSIWkJ5gwE:T/R40zSEnNNVVtWkJKwE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource [email protected]
Files
-
[email protected].exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ