Behavioral task
behavioral1
Sample
159be70701e7fe1d7d41ae092f1892f87d0cc615c829b16aa78a333e6a7aa923.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
159be70701e7fe1d7d41ae092f1892f87d0cc615c829b16aa78a333e6a7aa923.exe
Resource
win10v2004-20230703-en
General
-
Target
159be70701e7fe1d7d41ae092f1892f87d0cc615c829b16aa78a333e6a7aa923.exe
-
Size
10KB
-
MD5
99ca96aad19f9b58bfaa026e8b3e40da
-
SHA1
11bfab7bc400bbeaec6a46eacbcdbcd490dd4640
-
SHA256
159be70701e7fe1d7d41ae092f1892f87d0cc615c829b16aa78a333e6a7aa923
-
SHA512
7267e98d590a906653216f92bc46dd598d54cf8fac2a74ccdda1bf4130d9f7d52a2c0e899cc434978ea0d188f486dfcef1b1ccb695640d2805300dae171e51a8
-
SSDEEP
192:xSHXwiZU4+PVsBdlCnnV87Mf7Fhqg9QblGr3bzssFssq:MHVU4kVs3UnoezTyl+vssFssq
Malware Config
Extracted
customerloader
https://kyliansuperm92139124.shop/customer/914
Signatures
-
Customerloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 159be70701e7fe1d7d41ae092f1892f87d0cc615c829b16aa78a333e6a7aa923.exe
Files
-
159be70701e7fe1d7d41ae092f1892f87d0cc615c829b16aa78a333e6a7aa923.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ