Static task
static1
Behavioral task
behavioral1
Sample
protectedByNotfishvr_test.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
protectedByNotfishvr_test.exe
Resource
win10v2004-20240426-en
General
-
Target
protectedByNotfishvr_test.exe
-
Size
557KB
-
MD5
15e1483ea0567c14e2d2c1931369fa62
-
SHA1
434adf1582ccc426106ed773c5a44033b09c84ef
-
SHA256
94b9b8cc71b9106bba0d0adacb20a63ac9aecfabfa69f63ee613239a96b14583
-
SHA512
49e80caf061c4b7732b6a8941e93eedfb66ba33fe918a0ee9c56ee56178544a85aaf649526fd214fe576a3c10c30a44ea7dea27064bd5c0bfb85b877783b6466
-
SSDEEP
6144:lV9YFMMCDVAzl8ErEK9N6ET9EzNmsOlhfflWl97bStuys4UKb6U:lVM16UINmVdgNys4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource protectedByNotfishvr_test.exe
Files
-
protectedByNotfishvr_test.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 555KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ