Static task
static1
Behavioral task
behavioral1
Sample
123.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
123.exe
Resource
win10v2004-20240709-en
General
-
Target
123.exe
-
Size
2.1MB
-
MD5
4871fcfc6132b52f6d12b91df9dbbe94
-
SHA1
26847d6cf9e9d9b6df12888036c7b343aba5c0cf
-
SHA256
339305fa71913fcbc6f599301eb0694498d5bb40a53e0a711241c20c303cd419
-
SHA512
efb6f8d1f4f203533fac4ec1cb03a7874c34dfcf1b098bb42d4f1d31b0106151bde3eb1999fa2668306f57b5c8405bfb3b0b931ed3cfe1f6dfc56f5ecf9919f7
-
SSDEEP
49152:tAjiSiRkqXfd+/9ATrgBWBKH8jkDVFCNXODzWS9HfX0HJ:KjiSiRkqXf0F1+KH4kpc+DX/0HJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 123.exe
Files
-
123.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ