Static task
static1
Behavioral task
behavioral1
Sample
work.exe
Resource
win7-20240705-en
General
-
Target
work.exe
-
Size
1.9MB
-
MD5
696093ad8d776d6a18e21e60bbfcb00f
-
SHA1
cbf05a6a0abfe1245b7bc3b989a82c40e896c6ba
-
SHA256
1130ac1350c012b1ef293304ae61c9abe22ac8a0e20c708de009fa037ac71421
-
SHA512
b30fc0fef3181999e12a522ec688a6909053462c64cddd63705a99d7d4d4488fc95b338ae1fd65f6f50c1c185b1edfb060c014ff5177636bfa098c0165beaf48
-
SSDEEP
49152:Od+KzYgjTWq2EtZ4KWSHWm9J8CCNI5cJ9WasWtkWGOfWAk4ZnWu5DO8:y+QWpEfZ2m9Ju25ciasWTGO5k4ZlVZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource work.exe
Files
-
work.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ