Static task
static1
Behavioral task
behavioral1
Sample
SPECIFICATIONS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SPECIFICATIONS.exe
Resource
win10v2004-20240508-en
General
-
Target
SPECIFICATIONS.exe
-
Size
2.5MB
-
MD5
8dcde8d3e5361e46c9a0eb3a7c559b6a
-
SHA1
a2bec0f3c99c9197443bc161233ec19678172952
-
SHA256
a19e8babf5efa761ff04475ae8db2e359e1d74f19ebb81cb59c57aa07ab9390e
-
SHA512
005ccb5697e533fcbd782509cdb19c381a8bbf3af35f6282456a4236bd5793109da8b81296140496755ca608f93cde4c963f46c5d8694caf5c7c66e194de006c
-
SSDEEP
12288:l7d5M1YVb+stU0vbzqD7wngYZW34lM5G7KSvicVcDD:K1YU1UbzMOyU69eVcDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SPECIFICATIONS.exe
Files
-
SPECIFICATIONS.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ