Static task
static1
General
-
Target
mathcad.exe
-
Size
610KB
-
MD5
67f48d73d7f8f975c509d0b2405d5624
-
SHA1
f275c5fccaac0841e2c02f6ecc56b67a5ad752e4
-
SHA256
d2a0a541127a162e9dcd71a281b5183129331f89d3bd27ab20fdebca1302fcec
-
SHA512
fbd1369a9f6253e5fcbe0c58be53c18475b866c0da2e60096f9c75432ad2d8a4d3be7125444521d9be364b9171ea454034048385208402a98d9a3c18b5de1a7d
-
SSDEEP
12288:EKdS3fJBZceuay7ykyzEaYwrYLvC88NU8/7Y4pkemSfOJmWFEdKHERJh1A:23fvZceuaeByYaNrY+88N//7YReBwRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mathcad.exe
Files
-
mathcad.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
SSQA Size: - Virtual size: 892KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SSQB Size: 591KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE