Static task
static1
Behavioral task
behavioral1
Sample
Run64.exe
Resource
win7-20231129-en
General
-
Target
Run64.exe
-
Size
2.5MB
-
MD5
8e815f3382ad9e5eaa6760a876248a10
-
SHA1
b53935455db7c11344a8f9a18da69fa4c6d1b659
-
SHA256
372223848f9556da0e6d3230911ce37b4990c237b7567e4beb6030ec564be12a
-
SHA512
36eca866d2238fbea18ca1d685da24221abb868ee051f959e6e9869a6872a647c926ff4998424cf7df05fd2dfe44043ba6c01cd6b3f2d7f4f73a2583ca05d368
-
SSDEEP
49152:iZdGHFRI7/nMODU5FmnxJmtmlT0xUjCnMeE0nuiho:fHFS7/nMODU5F8JumwqCdEhP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Run64.exe
Files
-
Run64.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ