Behavioral task
behavioral1
Sample
Malicious_ad6f0196c3a5f60511866366ad352104b5d67adcdef2e24b7cfdaf400f8756ac.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_ad6f0196c3a5f60511866366ad352104b5d67adcdef2e24b7cfdaf400f8756ac.exe
Resource
win10v2004-20230621-en
General
-
Target
Malicious_ad6f0196c3a5f60511866366ad352104b5d67adcdef2e24b7cfdaf400f8756ac.exe
-
Size
2KB
-
MD5
f743b81e684d78d86f39c1470039d765
-
SHA1
bec35b212ded8c7921731335cc491588d242fa24
-
SHA256
ad6f0196c3a5f60511866366ad352104b5d67adcdef2e24b7cfdaf400f8756ac
-
SHA512
1691b11a7745f6cec26106252ebb2c8439eb05a732bec5bb91bb8b1ed71acb6af75e6e5cc8e80c53f87e816fae016c1f3a82865ac5ee4761c7038c57a5a6b636
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_ad6f0196c3a5f60511866366ad352104b5d67adcdef2e24b7cfdaf400f8756ac.exe
Files
-
Malicious_ad6f0196c3a5f60511866366ad352104b5d67adcdef2e24b7cfdaf400f8756ac.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yssp Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE