Static task
static1
Behavioral task
behavioral1
Sample
Malware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Malware.exe
Resource
win10v2004-20240226-en
General
-
Target
Malware.exe
-
Size
4KB
-
MD5
72e45aefa6a14c0c36f142f55eddad2d
-
SHA1
7b5b0a2190e3125abfcbcb3463b04eafb3186140
-
SHA256
ee506cd98a56c71b33f057a0f3d86d0c3325c07b72e752fabe98f5cc9ca9a066
-
SHA512
4b1da36e45ee11665d43ed1bffbcf3cecf519e703e950af60258ab77cf327528392e5728f0f31ea146c5055cf0b282f3894bd72a0fd386acbe249911b835f8e2
-
SSDEEP
48:qPgiuPwRR+zTJjvJ/TzHDMr3zV8XIgNoca7FQbJt:ppJjvJ/T8r3zV8X/Nocak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malware.exe
Files
-
Malware.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ