Static task
static1
Behavioral task
behavioral1
Sample
Obfuscasted.exe
Resource
win7-20240419-en
General
-
Target
Obfuscasted.exe
-
Size
154KB
-
MD5
2c11091a64cfc66dcd8d75d4f4b65e14
-
SHA1
e0b2a7c9b14d123821135b723b802c0830dd9c8a
-
SHA256
fd6e97caf006c9894350f13364846be84e3ff6f2d140ddf8595c36c24185e7ea
-
SHA512
80b1b4af04e924062b223c5d363e9cd8235c14cfe5f7bc51492bff2a217ec0475fe97f5e3184d5fbd4956a65915dc35da9f001bb0cc7af55de6738d925327d5d
-
SSDEEP
3072:l35/EpiP+K3JNHljhwKTvKwrU6gxyZdgjI9fjtnWwC3IfO5lXY5LTASfqY:r/EpiP+K3JNHljhwKTvJHgxedgYtnWwY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Obfuscasted.exe
Files
-
Obfuscasted.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
!Sugar Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
!Sugar Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ