Static task
static1
Behavioral task
behavioral1
Sample
document.exe
Resource
win10v2004-20241007-en
General
-
Target
document.exe
-
Size
246KB
-
MD5
4573c003b13aea8b5569cc5274ecb0c0
-
SHA1
449649bb3c54e1d01b5c142aaafc4264a74f473e
-
SHA256
2a0181d73b26a5133f80f37cf8aa72760d24e9f4826830bae2091e64754e70d7
-
SHA512
6d0e4f82de133a0f4c9fffdc057c964b74c33ab95d5a6c2a84fedeff3233a1b6c808877aa410357b1b2b3c092daa9d9ed20773d5924bfbf1e8df9131b51c3689
-
SSDEEP
3072:c0y0a1jHvRjA7dLPzYkz7HSqN0y0a1jHvRjA7dLPzYkz7HSqN0y0a1jHvRjA7dLp:ccczrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource document.exe
Files
-
document.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ