Static task
static1
Behavioral task
behavioral1
Sample
build2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
build2.exe
Resource
win10v2004-20240802-en
General
-
Target
build2.exe
-
Size
3.6MB
-
MD5
293753139f3e93d518f0febfa88b1713
-
SHA1
815f67e69405fec9fa7e5170711c1b108e6a2beb
-
SHA256
9d5ea5fc90a1f1086bcfc43e42ba5878708c627171ae5971397ef33fed3d1016
-
SHA512
79f93c96ac8f3bdcc4e22e76ee525f318b6c259ecf65068cd077393103c647d88d0542f1e09779872b984bbd208603bfc6f593a684b3dd4806a76a6bfa0f5f7a
-
SSDEEP
98304:iEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:E3kSILYWqZAkuujCPX9YG9he5GnQCAJS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource build2.exe
Files
-
build2.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ