Static task
static1
Behavioral task
behavioral1
Sample
MACHINE SPCIFICATIONS.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
MACHINE SPCIFICATIONS.exe
Resource
win10v2004-20240802-en
General
-
Target
MACHINE SPCIFICATIONS.exe
-
Size
2.9MB
-
MD5
aeeea788d6a25ca1cd3596ed589211ff
-
SHA1
f1833c333e7e428442db52c4d011cc51d8a785b6
-
SHA256
3d7a5cf07ca94fe22e8fd4e1bdb1a2af43f2e627b2baa6cdd1d803adb90047b1
-
SHA512
64dd23a80100c3f1b79b06e1148092aec29d1f92fa4cab77f854344f7bfb50e56c7897f5a343aaca93e5e9b840423ed8c98cba5529706f686da1177925ce009c
-
SSDEEP
12288:ZnNZVzw3SkxcuT1nffhkmzLyBHIKY1kOzMszGwl6GpPVqLs:NjuJfpkOyBHdYl/zzqo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MACHINE SPCIFICATIONS.exe
Files
-
MACHINE SPCIFICATIONS.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ