Static task
static1
Behavioral task
behavioral1
Sample
HostManagement.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
HostManagement.exe
Resource
win10v2004-20230703-en
General
-
Target
HostManagement.exe
-
Size
60KB
-
MD5
8e473c45980dc07fde6098542fa97257
-
SHA1
490f776b190d091dcc6b2d579e248bd280dd9abc
-
SHA256
319cc181c6885f305f971ffbca9e698384cc6e2454e48ea357e400f1c44e811f
-
SHA512
505977f1f26d19d203e217efb1c98e81ab7daa91dfbc0d1e8b6ae01960b81da8fa2ea5b781737e70f1db8c18d882b7eb7bd1c93c2655c80755e2bb7e38c7f3bc
-
SSDEEP
768:HdEEaiGltOgkw+Jp2PD+gMd/z/r+WEN66c0B5zo1DXJ6q0iU:HdEEa3bOg5+JnVJ/qWEFce5wJ6qs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HostManagement.exe
Files
-
HostManagement.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ