Static task
static1
General
-
Target
hacking tool_Guard.exe
-
Size
432KB
-
MD5
cc4502d24555a8ec8a23f97b0f9485ef
-
SHA1
b5a360904049bc4ad1b082c7090d908720222673
-
SHA256
bdcf551061b79abe0e224b98ca56550bb7e62b16026dc700eb9a597dcf3cff80
-
SHA512
6971643c7644b44ce1a1a24519c7b74f0234b0e14fc1e15df4b3f666e06f86245b0aaab26a447563cf04f713b24d7408c0da4a27fc3d34d7b3c9545b95a74818
-
SSDEEP
3072:98ueGxhCv8O8cQlh86XNKYL8PpTSPtZPDPbEseAkIsbwIWJsp3F4FbpjY9BBgnYQ:980CkOWTxzDDIxisFFG1PxJob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hacking tool_Guard.exe
Files
-
hacking tool_Guard.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 430KB - Virtual size: 429KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ