Static task
static1
Behavioral task
behavioral1
Sample
1234.exe
Resource
win11-20240426-en
General
-
Target
1234.exe
-
Size
455KB
-
MD5
c36768eedbcc2cf5d92325fa4ebfd404
-
SHA1
956b7cb8435e7199fc9c73567de26bd8fd34b96d
-
SHA256
d56c1672146516e39e2385cc7bb39a13dc07c47265ebe06af6a67fce3099c81e
-
SHA512
c55817de43ba7cafc613f85c787560a8dbeb930b94243214c11f3e43cdb5e1ec7f60abd54fd4084e3015072fcdb1634ef2aac4ba5a1bba177022677df1356278
-
SSDEEP
6144:+TKKT99B3ozVqDPuMTL90Cje6VlWT8b9P1QhGE2pElv0+bp4+/HIg:hKTv9oCvLWCjPVle8dRu0HYI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1234.exe
Files
-
1234.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ