Static task
static1
Behavioral task
behavioral1
Sample
Obfuscasted.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Obfuscasted.exe
Resource
win10v2004-20240611-en
General
-
Target
Obfuscasted.exe
-
Size
153KB
-
MD5
a92784fb3ac4febbc4542a978420067b
-
SHA1
f5b6fe2a3c60b98ec795a551809d0768d94ad720
-
SHA256
b3a921b8790b09a0490213c9bed256ad3c537fa6f5270c30acd831e46ed78cea
-
SHA512
3b7087cf43ee2bc00dd82e0ed81b78d0779a6bb98d3ae97fc5b6a155c48b0dc94bf3d3019be9feb41b9f6a32dbe65edd0bc702745a6d5a56ed9d9b90d010a8c1
-
SSDEEP
3072:PACGejFgJkHD52LrLqPDnNNM4a2Mgx1XpDPN587XpeUudNfqY:VXFgJkj523LSTaRg/1P/87ZeVPq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Obfuscasted.exe
Files
-
Obfuscasted.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
!Sugar Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
!Sugar Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ