Static task
static1
Behavioral task
behavioral1
Sample
hello.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
hello.exe
Resource
win10v2004-20240802-en
General
-
Target
hello.exe
-
Size
3KB
-
MD5
9758959bf7287f0ec6d8760113df69c6
-
SHA1
9bb019046ccbc25951b5bfcc29296a185e74d06d
-
SHA256
deb0150a77fd6eb58a97cc4f9473d63433518eed398bd2e5fda9c2235c5874eb
-
SHA512
f5d4e1bfe71ede5414b52cc0ba05653e07220d16715702f7e155a93b46cd5dbd9b95375c5aa15cdb82a6bb111e9617196aa92246e40f1218d6b5afd2ae0fdd68
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hello.exe
Files
-
hello.exe.exe windows:6 windows x86 arch:x86
55f8008c10b32b78371729e420044244
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
GetStdHandle
ExitProcess
Sections
.text Size: 512B - Virtual size: 51B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ