Static task
static1
General
-
Target
Shadow.exe
-
Size
12.2MB
-
MD5
434c8b94d89cc8a1889a48b0d1556a7b
-
SHA1
40fa54d30622871768f6712f736b481b41336937
-
SHA256
34ef8f1b54cdd9957264fa839cb90ed835f63ef889d2c0135412843f7ac3b417
-
SHA512
c28ad44a9097349e20bf7107860b15b366efec9b944d01284a9986b9bd7031953c98778b17e8cd7efd4671c670afe1d1f4c5ae7fd7b6c4a29ec482a10eeb90f8
-
SSDEEP
196608:+cWW1vIW1vxW1vAW1vXW1vHW1vZW1vdW1v7W1v9W1vxW1viW1v3W1v:v1R1I1p1+1e1w1s1K181I1r1u1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Shadow.exe
Files
-
Shadow.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.1MB - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ