Static task
static1
Behavioral task
behavioral1
Sample
TEST-protected.exe
Resource
win10-20240404-en
General
-
Target
TEST-protected.exe
-
Size
1.0MB
-
MD5
30be169763d38846a478bb3b1f2bc021
-
SHA1
66eb49fd94fe043a7378548b169633a0098c9da5
-
SHA256
50517101fe6635700943ed09f50ffe0efa8a91fc83fd90a2cc79c284dcefbd4b
-
SHA512
ed37c74243af0de06db7ab8608727a8625bf285b4be8be2db15b973691ff8da1646426d84a29f7abe142113e8c4cd7d9496fb345917a0129f1456daee0d5181f
-
SSDEEP
12288:d2WStwpNR9gWpk8eOAs9GetrYOtm3Ed2DeEqt0UBZ//pxoa8MvhHaJkqnVmx+:TStWNrfpCOAvOtCqb/H9vVaeIk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TEST-protected.exe
Files
-
TEST-protected.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
hw[Eo Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hw[Eo Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
E3A6F204 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ