Static task
static1
Behavioral task
behavioral1
Sample
PSLessExec.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PSLessExec.exe
Resource
win10v2004-20230915-en
General
-
Target
PSLessExec.exe
-
Size
6KB
-
MD5
6434c4d6381f5a685021b75600b76de1
-
SHA1
7d2cf52947b8b1d1d2f7cc7cc7fd8a1943848044
-
SHA256
9965c1c1f33049afbd52a8f57548871e57e304a8f3a45ec2812d05cc0b5e1592
-
SHA512
92a08caa21934c3aca292a0931e1bc5742b518483f215b5fca3f03507aea07ca2491473340184f1d4539314c32d9b12eaf614c5590d1a0ce796d5e471bf84729
-
SSDEEP
96:TaW/vlhZ5Ewy3Dn8mEzDMWzOt1qKqiMpJJtZylFT9ICzNt:T5nZ5E9TnREwmLiMpTzcFT9Ik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PSLessExec.exe
Files
-
PSLessExec.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ