Static task
static1
Behavioral task
behavioral1
Sample
Scan.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Scan.exe
Resource
win10v2004-20240412-en
General
-
Target
Scan.exe
-
Size
607KB
-
MD5
42832db85ef430c08794a3b8125c6739
-
SHA1
a9e8838247edac1e67a61406839b1c05821735f9
-
SHA256
5a351a6f459836b952ae45a564add378ddad3b6b725e7b63f831b84f679c3818
-
SHA512
b63cee7040bba9071af33e8443578f470bdef4187d0c829ce731d1b2b829b5d3aff9d697401fa2518ed20f69cb36803987a1ebc0ef9f5b4a274c89b107bce3ed
-
SSDEEP
12288:n2ye0UL1HmM2i3M27fC7YYwcxHvuUTkqFnSw1bKteUOIgX7hISySSL:9eZBHmMNM27fFcFuKkqFnS6Gtx4X7OSC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Scan.exe
Files
-
Scan.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ