Static task
static1
Behavioral task
behavioral1
Sample
ERHALT00283772.exe
Resource
win7-20230220-en
General
-
Target
ERHALT00283772.exe
-
Size
1.1MB
-
MD5
22369c0dde61f15c3c210d7c85075921
-
SHA1
1516e1852b524257032e3471b40c242ea58ead00
-
SHA256
5fed9c873f468294fce13808c139fc7ccf40d412e052bb31c8d768750ed8a22d
-
SHA512
dfbeb18dec324a735cb313bb0ae56bece6f9fdd44a5289ae8363232e3ad02b2839eb6d25d50ff060e2cd6a21c3c50354d8cce259aa9fc0d8d7f2adce537a8e3c
-
SSDEEP
24576:x7m58lS4a//Qgn7MUhFUD+8GUniB/J+J5C:Jm5Dh/QMF++8GSiB/oJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ERHALT00283772.exe
Files
-
ERHALT00283772.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 666KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ