Static task
static1
Behavioral task
behavioral1
Sample
gold-obfuscated.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
gold-obfuscated.exe
Resource
win11-20240508-en
General
-
Target
gold-obfuscated.exe
-
Size
164KB
-
MD5
048afff1ae3b5fa3b53615df52e9de68
-
SHA1
50ee3ae4b2970e60282fe9f83ad86ba050d75216
-
SHA256
0b1db4351f9fce6dcc0847fe7bbd1263bae4676d107fc32e0d8c2df0db386af4
-
SHA512
d9ece752dd2b34c06959cdf7dbd3b78b514b5a15270d8864144798c5c88be014c1fd0bb4d9ca4441cb7ea5b06fa69158bfa1a6aa5a534897733fd4697d9eb2ef
-
SSDEEP
768:KdB57epA0m+wirHdYuHzXcF+zZbssvF/QXX608sWZw7Mufzr9vBLuP7UgnQjY1Wt:KZeAqY4zZbse4H66YFfnQeCWtVclv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource gold-obfuscated.exe
Files
-
gold-obfuscated.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ