Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20240226-en
General
-
Target
1.exe
-
Size
260KB
-
MD5
d31549469d1bec8e5a0c8380ba053ce9
-
SHA1
f13c660b6211b5b3e31c6f1b06da64ecafbcb8d5
-
SHA256
2056ff7a015d76df78777682d91c2c881b420f0461f45e3f1c174108838ba84b
-
SHA512
272c5712c7d426e520e8d499c11e6673d21fe16d9c4bc0ff6f6cea1712d294e00bf33672ba451f4687afd151ae8b1499d8b0da4717f51a9896473f3cdcdac6ee
-
SSDEEP
6144:IXA7b/qzR/Rh+qLLf69tYF6m5KajeysQExQElNHwoOl+uP:eRphpSCpkQERlVwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1.exe
Files
-
1.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ