Static task
static1
Behavioral task
behavioral1
Sample
Output.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Output.exe
Resource
win10v2004-20240426-en
General
-
Target
Output.exe
-
Size
122KB
-
MD5
fd08b9ac311ff6eb9c24e79ebb829b0c
-
SHA1
e2a8a4a97f104cc6c9fcb43d2e15e05bf0c73ff3
-
SHA256
3c63c4ca4f2fe4c5541ecb267e8c98154dcd1ec3dada24efa8b50ec8d4542824
-
SHA512
55829d66ef2b92e96c693c6af08008602b19754ada2c9100d3f630de69742d99d4b87cf89518402c1a0c05b4da81129793dd489a6af4d0ae5df520f783432dab
-
SSDEEP
3072:mz8hmIvtEwHJp7eiH7o8cB5+LuLjB3/IMKilf55:LEUJpp0/cKLj9wMK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Output.exe
Files
-
Output.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ