Static task
static1
Behavioral task
behavioral1
Sample
Document desription.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Document desription.exe
Resource
win10v2004-20241007-en
General
-
Target
Description.rar
-
Size
1.2MB
-
MD5
d57433d03f01f6205260f9e68a5cf61e
-
SHA1
744075a7f4cefd6c5b6165185075f715e1cb93ce
-
SHA256
99708cebaf8533fccab62718d43c6c1cdfdcb48640c423306a894dfbdc519b85
-
SHA512
4a7fbb0a4766c5d5b6c4e91c096e25790926644e4d2cbdc1de2372d3abd40a04513eef732efd912f329c9e05bf3c134bbca4ff6eaa81c42363c802f16877e3c7
-
SSDEEP
24576:TMNGSZVkogM7vl02PPyL3S3mfUJyZGWG3BdCkh5wbZu4Q:TUGGSs7dDPyLiWfuywWoBYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Document desription.exe
Files
-
Description.rar.rar
-
Document desription.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ