Static task
static1
Behavioral task
behavioral1
Sample
stager.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
stager.exe
Resource
win10v2004-20230915-en
General
-
Target
stager.exe
-
Size
7KB
-
MD5
2102572c4bf57f2d8d828efac05a75aa
-
SHA1
91de8c8a1af6cb41958cd9d46198e6560ce63450
-
SHA256
6e6fd8b62b684b4b4ac5e766fc1a44fa7f5dac66a995a1d31550e041d07cfe1e
-
SHA512
98b88a42cb229d4b8e0c473003141673e743c52c68824d0aa9c9a739e32a51f391df48abbb157ff2c8c7e1d6d29cad66cd7fa60b1efc4c42b7845c1b15cc4e54
-
SSDEEP
24:eFGStrJ9u0/6iwQnZdUBQAVX56WYh7YK0+LML0W3L4ps/KITWQjdyNzAVUYszn26:is0twEUBQkih0SgL0LsjW2kzFZzCWB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource stager.exe
Files
-
stager.exe.exe windows:4 windows x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ennf Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE