Static task
static1
Behavioral task
behavioral1
Sample
pro.exe
Resource
win11-20240709-en
General
-
Target
pro.exe
-
Size
43KB
-
MD5
e70a1a403646ce4a3a87da7fde28cb9c
-
SHA1
64f5e132edda44a8d4c5f83189bd6cbb0cae6276
-
SHA256
6dc9e1bd2600ce2c17885746e0a91db5861a77c788cb034d0c1d6cfeb3255516
-
SHA512
b3e83a35b20e8a5096710345dfc32a88a8266f784942c190b4bb81d3b464872c5c2fd7b9b31795e20a374dcb8ec6e908ac9f60d4d6368c9b43c59d8b8dadbaa9
-
SSDEEP
768:8rzkrKGBg9c57A88NwEi/0OzgQxw3QO444ycRUT0W9PIGQz1QB6SJ/OLo:8rzkrKGqlNwEHDQS9444ycGAW9ls1Qou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource pro.exe
Files
-
pro.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ