Static task
static1
Behavioral task
behavioral1
Sample
shellbag anylizer.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
shellbag anylizer.exe
Resource
win10v2004-20240802-en
General
-
Target
shellbag anylizer.exe
-
Size
302KB
-
MD5
722ed5e7ff86512f825d296e073413eb
-
SHA1
cb452bdb2c77c3edbe46374fdebc8f6009798aa1
-
SHA256
13b348cd229e23b0e55c9c2088a51916b819a369e363de8d11d7cb6391f29176
-
SHA512
000fc1a7e61b0ea48056fba746aa3200545002797bf76519e5fe28d48ad30a093fc13860d05a07d697d19d246f627962782d1c1aa62d6e07aa7e6c19806f028a
-
SSDEEP
1536:vUvlGtNL49D1Qo2u5hpisqGXfFHfrXEvIzVAXuiRp6EE8bMlnEfwGzod8MddBK1d:cvAT49D1l2SMubpxiBYe1oUJ2hsOFlD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource shellbag anylizer.exe
Files
-
shellbag anylizer.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ