Static task
static1
Behavioral task
behavioral1
Sample
thasef.exe
Resource
win7-20240704-en
General
-
Target
thasef.exe
-
Size
1.2MB
-
MD5
293314010946b8cd51dc15a3196000fd
-
SHA1
12dc90b6f66fd0cec0a70fe5ae7925e2c077f65d
-
SHA256
5fc5daa899296feedcfa0322189d7cae57fe717d1c1a826c353d4bdc948e8270
-
SHA512
87637f4a5e3869de361321dc8433f4f487d9411a650a3930bfa649a4b559f236601a887507aa89c7f11528dc68f169bfdd3a185c4981c7e6aec6dfd8e2f50032
-
SSDEEP
24576:IiQkxpoYVM/Jn9YZnsRav+35R1uqsEW3A7/k49L48kv+Y8PPYeopMu8yp:xPoYi/bWnsRav+357B3/X9Lov4PAOu8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource thasef.exe
Files
-
thasef.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 129KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 915KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE