Static task
static1
General
-
Target
ZeloWarePermSpoofer (2).exe
-
Size
1.4MB
-
MD5
750c40feeb1ed8a88b7c2db5468cf291
-
SHA1
cb518710d90869d6ea50be6b52842feb905718ca
-
SHA256
d22b504e874c5315153d8515c670642d8c284e87980ebccb5aad38900392bc44
-
SHA512
75a996d6c8e19694c69bac725d6b03d77b2473161102e59c0eb04b468d4fdf6c891843c828b89dbfe425121ae3345cb46ca9dca1d8be1090b05dba1a4e7bc500
-
SSDEEP
24576:zNJjDBAOySrPc/TT7lW/xPvgF31B0O8J0mPVcCy1ipNpp9kqgbPyic/4aXkdaN15:JJjDaOyWc/TcxHgF31eO8JP6t12pp9kC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ZeloWarePermSpoofer (2).exe
Files
-
ZeloWarePermSpoofer (2).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ