Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20240611-en
General
-
Target
1.exe
-
Size
221KB
-
MD5
db42368b63eab5681e2ef9c2bd7c8ba9
-
SHA1
3c74970e2a52b02db6bfb5ee9a17638dbfda6271
-
SHA256
e395f83edc7e8d799386ff7ae4db8cb119d6eef3176f5e39a14e0d00bd87451e
-
SHA512
2273be9239a1a01e75088c49dda8db33d26c37c69ce35e2ec390de97bcb3ec7125ba84bfdb2577219dcaac1fb16cd1bc33b3b6b42b861254d12ff7697ed96019
-
SSDEEP
6144:ePEAcohebmcSxwpRrPDhiZhyLiv3/5FZ3AdP0l/UlX74bD:ePlcfSxkJb4ZQivRFZKP0mo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1.exe
Files
-
1.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ