Static task
static1
Behavioral task
behavioral1
Sample
free.exe
Resource
win10v2004-20240802-en
General
-
Target
free.exe
-
Size
2.6MB
-
MD5
2a84d42031f69d4cfb94ba913b50e70e
-
SHA1
5e3a612296dc4971f58b40812d8109e405e5b5f9
-
SHA256
b1b61e76682097df8309b5485778866f58c789cff2e5999571533eefd7d5963c
-
SHA512
a44a6fda9abebd307c908fba7633efa934c3e4f42d257214159b5da5510bb22e10844750f314dd6992235fda76fe1d7fc4c0e56b3e6777afc7d8bcf355cf22d8
-
SSDEEP
49152:0dh9pfoh9pf3ITYbNbNWo4kSH3OqtwIyBn783vSskcA:0dhEhLIT4bNJFY3OqteR8/VkcA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource free.exe
Files
-
free.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ