Static task
static1
Behavioral task
behavioral1
Sample
Estimate 1573.exe
Resource
win7-20240508-en
General
-
Target
05062024_1630_04062024_Estimate 1573.gz
-
Size
611KB
-
MD5
1df5bd23244a51324e364500657fa81f
-
SHA1
7227b9e86028b95877b3d7145c120697fcf7e8ea
-
SHA256
50c03631afde79a2b443551fb52f030546fea43e0f7d52c8fddc5731618604e2
-
SHA512
8be10a58519022edc4241817c5a4c83d945059f11c578cb15fac240c659a01c2b9bb7abb7f174b5474a8dae0ffb72a0910b812955a3b679eedf18ec2e4fa3be3
-
SSDEEP
12288:O5huNonZ56O/HHUHfg8SyHvzGhTRu+/rfCIQSj4e18E4xUFs3RJOKkN:O5hUoj6O/nU4aeR1CIQSzQSFUHkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Estimate 1573.exe
Files
-
05062024_1630_04062024_Estimate 1573.gz.gz
Password: infected
-
Estimate 1573.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ