Static task
static1
Behavioral task
behavioral1
Sample
windmw.txt.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
windmw.txt.exe
Resource
win10v2004-20240910-en
General
-
Target
windmw.txt.exe
-
Size
63KB
-
MD5
876e14e287c4106ead91694d9c4784b6
-
SHA1
6bcf41c7c51f1db231827d6c7023753f5bd703f0
-
SHA256
8e2d5bb28601c0dad1bc25d69f9e11dba20cd3044f65f75c6973bd33dff75194
-
SHA512
b8b636efd9440a901d359be50a8c8b3ba7770cc01061351ba6f2e51b3b5e8540558293d7d0976a6ad02bd72b498e631bdd5d1ad83c19440eb38bb018f6f7dddc
-
SSDEEP
1536:IgwOo/IauxRFeZkh6wsM7UeRrHOb5jbbOAPBqOmvJrPlTGxn:IgVooRFUkbsM7UeRrY9bbOCqOmvJdKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource windmw.txt.exe
Files
-
windmw.txt.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_MEM_READ