Static task
static1
Behavioral task
behavioral1
Sample
TokenCheck.exe
Resource
win11-20240419-en
General
-
Target
TokenCheck.exe
-
Size
9.0MB
-
MD5
68d1104d2a75aa6f96540406a2c9c661
-
SHA1
ab50f34e819098124f2ebd3bfed0802b20cfa913
-
SHA256
f1cb63199e8e7dfa91139a64e5a588e95fe1920294390c08a7f11584afe64f06
-
SHA512
df546d611b64869ed0cf05e0a07e215c47a7243906edb8662fd19e09258874fa187ad393d5261c76c6d43a4d68eceb06f13ceaf3cdfa4a7e79f589e8f219144d
-
SSDEEP
196608:fgtUb8mmm8Pf+wS9egAA0YaYsjRCgEp6ikl:fYrlL1gAjQ58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TokenCheck.exe
Files
-
TokenCheck.exe.exe windows:0 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Lite Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lite Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ