Static task
static1
Behavioral task
behavioral1
Sample
ImageLoggerVMULTI-1.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ImageLoggerVMULTI-1.exe
Resource
win10v2004-20240611-en
General
-
Target
ImageLoggerVMULTI-1.exe
-
Size
138KB
-
MD5
22ef4c293fca89452369319263be0306
-
SHA1
baa7b3da5b017060f015020b59f22f036a39f098
-
SHA256
df862024ed1b831e6c6053ff2c5e109b63b7b104fcfd71f243ced4bcde7b7f91
-
SHA512
903956680bb51fb7d81fa9322fc94154c2451f489e216b3dfa63ba3971ef892b919bd5988380b364c14ac9b12b02a7555c75cac845d525de6d1f56007dc52095
-
SSDEEP
1536:LMzXswfVn1RswjlOag+E2OkWw7eMew+apnMSrl86AylTKrXvVfuUxKFgKqkItp1e:YzXsqZgWEwqM8apDfWK/Yhb7bqfcg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ImageLoggerVMULTI-1.exe
Files
-
ImageLoggerVMULTI-1.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
X=@8B/ Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X=@8B/ Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ