Static task
static1
Behavioral task
behavioral1
Sample
PASS-1234.exe
Resource
win7-20240704-en
General
-
Target
PASS-1234.exe
-
Size
1.6MB
-
MD5
84a9c6ce9bba17f0f6687555c73bebb8
-
SHA1
59240c3b11b160067a02400b0d484ff0fe33aa4d
-
SHA256
bc634b24b95a01a85984c55d7f37a2e1be6242bbc750a8f5c6cb4b7979f3cd2b
-
SHA512
1add11137bb3da3a1953fad137e02e29f04b43b5a8ac5adef595291e368565a4903e9a3d9450ddd08207db9df200bfcfac9fdc6127345c009c06f29df9c4e5ab
-
SSDEEP
12288:kDACg5dh75plVRAtugzZ766KcMuFad9kq42CWc50UqICLadUNH6i9MbglKt0096o:kDg7EM6/qsxvgEx9q/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PASS-1234.exe
Files
-
PASS-1234.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ