Static task
static1
General
-
Target
IdleMasterExtended.exe
-
Size
1.6MB
-
MD5
b7ada26048034a0e6b49e1fdcacf1557
-
SHA1
2f6278fd9b5b51132c9062530f4c3adc08c3eeca
-
SHA256
2506efaa1999e2b443caeb9705f8cf095d5e3167ba8ec1a5b51cd07acc2fbfa8
-
SHA512
caa7d1765e3d2c2b091e19cb5256cb00401d72c3745747969930b02d0c3cd1b97636643c211bbda491c4100e9e18156ef4de65840a9e7464f1bb8e35a305050c
-
SSDEEP
12288:h0s6Y0AMI7jU17mOx2H+xRupUliqYKs84+wPNSljyCCEe:f0OjCne+7upUl5Rs85yCCEe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource IdleMasterExtended.exe
Files
-
IdleMasterExtended.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ