Static task
static1
Behavioral task
behavioral1
Sample
Obfuscasted.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Obfuscasted.exe
Resource
win10v2004-20240508-en
General
-
Target
Obfuscasted.exe
-
Size
154KB
-
MD5
7e1d3233b9f450cb5d494d3386179d8e
-
SHA1
38278e28ab1553209bf57367317d32aa402158cb
-
SHA256
a3ea781d5d191c2010e0d66f12d3be5a57224638aa62e0c5f55b7c50ffd62f19
-
SHA512
a0e0c5a87927d621c0f31d4f58e5dba516ad93ae82c77f53e3e6625aa7a1ba98d7bee31c95eadcb9ba260adc4b46fbffe55b7314749d13b50313ea6c90f07243
-
SSDEEP
3072:cU6CLyKX3ABJXc0eLHg8uLqR0xPmwpeofGZ7Zli3aettl+Tm5ZNpfqY:kCLyKX3AfrAHg/qR0xPmwpe0QXi3aefK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Obfuscasted.exe
Files
-
Obfuscasted.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
!Sugar Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
!Sugar Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ