Static task
static1
Behavioral task
behavioral1
Sample
HashManager.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
HashManager.exe
Resource
win10v2004-20230621-en
General
-
Target
HashManager.txt
-
Size
238KB
-
MD5
4380cc8844ef6335abb5a13352ba18ab
-
SHA1
ec32c90e8056472d9cb4a320d3689f2cb9c210cd
-
SHA256
0fd398a019936f487fc831d48a3786f76348090374b6805d2b4b74f02cbd75cd
-
SHA512
1442e62ff3806ff48c84d81b62fbd80eae30c9e5e137cb87f6f2f40b16c0ae769e7fc25de42e796adc9d8dcdc6c37128f3dcf6d127e28fe54218e60963556cd5
-
SSDEEP
6144:RCmnFFn2rhh/m0ZBYGXEZUMMMMMMuMMMMgMkpB:RnGrDjZaGXEZUMMMMMMuMMMMgMkr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HashManager.txt
Files
-
HashManager.txt.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ