Static task
static1
Behavioral task
behavioral1
Sample
a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a.exe
Resource
win10v2004-20240419-en
General
-
Target
a.exe
-
Size
987KB
-
MD5
3c92ed7a17d27258db7ab8cc07f21fbe
-
SHA1
ec36cec53b6cb86d25eb253f949baedb012cdca3
-
SHA256
63dec2acef5d5f9e4c9d9626bd51b29db2e8d8111bcac60d531d80799c72267e
-
SHA512
a0c3d84eb5fce8da498e23c97355625a35c3d009569616ef5d0a9452e01e0e03814dbdd48fed4354faeb5823fac5262d14f24119d0bad4b541bdf424f04c3d09
-
SSDEEP
24576:/0suND4kgKBoCLtIkSuZFjIzKBzO2Omj2xIY/C2kFw:nFKBoCBHSkjsUOmj2aOC2b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a.exe
Files
-
a.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 301KB - Virtual size: 301KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ