Static task
static1
Behavioral task
behavioral1
Sample
HostManagement.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
HostManagement.exe
Resource
win10v2004-20230703-en
General
-
Target
HostManagement.exe
-
Size
60KB
-
MD5
207773aca52c606d988f8a7d21898267
-
SHA1
a61cd35c2197b2c0fffe51ccd5934eb9613245c8
-
SHA256
a0c1364c9f4a262e4c25c812493e9c076a7f88ca789175eb49b54d1f71a10a45
-
SHA512
dce59e350a182005fe012d804d901587006040e24fcf1c43e519245159bf3d74d3f3fe32b11a335c70b141d7c4c1468b580f6dbfacecf94273d2862f569fa601
-
SSDEEP
768:YdEEaiGltOgkw+Jp2PD+gMd/z/r+W+8+6c0B5zo1DXJ6n0iP:YdEEa3bOg5+JnVJ/qW+ice5wJ6nX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HostManagement.exe
Files
-
HostManagement.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ