Static task
static1
General
-
Target
Wind V2.exe
-
Size
3.2MB
-
MD5
adcac1abab0433e25e5cd97baab25463
-
SHA1
3a17739a5e625fe3133eb88e39488d428f34f731
-
SHA256
9accae81906e19392f7667ed5a9dcc9878e5e29a9af2e74f3a6bb5240b153827
-
SHA512
05b29515720737c247ba7d1b428603c6a9eef1c99d94d53b86d34951ee6f48a010f7d6f057e5ad34705a3a954cf3d2c062b111ac35c9fd76745ff790a338ca9f
-
SSDEEP
24576:N2NgyNilNR2zTJF2ZHuduTJTyCA59q0aSeQyW72/JW363Qf0ukHe7csdTTLyFhpU:NKgizdwlyCA59qRSnh2/0se7csd4TN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Wind V2.exe
Files
-
Wind V2.exe.exe windows:4 windows x64 arch:x64
Password: a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ