Static task
static1
Behavioral task
behavioral1
Sample
GruntHTTP.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
GruntHTTP.exe
Resource
win10v2004-20230915-en
General
-
Target
GruntHTTP.exe
-
Size
11KB
-
MD5
0f6e19493e36710a8dd615cdf92e16c5
-
SHA1
6ac70613c4ac6e2aa100a8e1c430717e2ba62a0a
-
SHA256
a80f588e3856ac4a43f46f123b4032fba38e6bb970a0ce6420a379bcfe2042a2
-
SHA512
d5961aebd6f6d4efd00a313e087f703a5c743a706879710940f22693d721cc3bcae0b94f6dc469954309978b9918d823f7b28b4898b8a121ad9fe9466f5df201
-
SSDEEP
192:im3wHwomhPRA5SRH668XaxboHms2Z0LrfEMiasESF/ccm/4:T3KgLwH68Xaxbyh2a7ij25A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GruntHTTP.exe
Files
-
GruntHTTP.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ