Static task
static1
General
-
Target
Utility+1.0.5.3.7z
-
Size
80.1MB
-
MD5
de28e1c45c94120168bedaa5a2623585
-
SHA1
f7df33dad85def832322f1e4e84274b0ddca5e34
-
SHA256
f9ea64101aa2653390d79c9f3b34aff0c8b1a3e87a2958be2d488a0c2061d114
-
SHA512
b205faec83ed5f06e13fd102c14137de2b7acbecd2d2261afaab7310d28d2143da101285b0ebab814bc5e97adb76f9be19c76970ed237aa7f1dca33af0127813
-
SSDEEP
1572864:mj6/4xut5SFxGr+0U/0qUrmz8eNY+nEHUGPd6M2W4blAM/ktg:mm/lfQGrZ2NKvdH2W4blQG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Utility 1.0.5.3.exe
Files
-
Utility+1.0.5.3.7z.7z
Password: 123
-
Utility 1.0.5.3.exe.exe windows:4 windows x86 arch:x86
Password: 123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 77.0MB - Virtual size: 77.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ