Static task
static1
Behavioral task
behavioral1
Sample
everything.exe
Resource
win11-20240729-en
General
-
Target
everything.exe
-
Size
249KB
-
MD5
7ca35794031c68dd342bafdb27863fb4
-
SHA1
3955345f668dadd3e9bc3c310709aedbc5eec4cd
-
SHA256
5e9dbd9a76aff01bb4c16a20ba7784dc2bb3b361fc8ac4e8ab5ac7f75bcfb807
-
SHA512
2cade6442ceafc2ecf197ed3e0125d0fc5a3f4068559b03d46ffb0d5ca252f4ad02068fdb7d356c8f5a67d45781c4d779a0a2ae9a77c6e56f2335cce2824e4e3
-
SSDEEP
6144:dNHanr72RMW/84bwFi7mlo3H0LfV3wXEp7q1nQBWmc2RHKc9kkUNM0srNe:rOrKR9kLFi7mlo3H0LfV3wXEp7q1nQBk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource everything.exe
Files
-
everything.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ