Behavioral task
behavioral1
Sample
087f95a5260d17a702c30fe22ef5dcf2c2ad326f106c3779c384e890c3e76f52.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
087f95a5260d17a702c30fe22ef5dcf2c2ad326f106c3779c384e890c3e76f52.exe
Resource
win10v2004-20231020-en
General
-
Target
087f95a5260d17a702c30fe22ef5dcf2c2ad326f106c3779c384e890c3e76f52
-
Size
1.4MB
-
MD5
00deee5b4f584c607a42ccc4b077581c
-
SHA1
857f0453dd9a27b99d36fd42f551aca33e47a8df
-
SHA256
087f95a5260d17a702c30fe22ef5dcf2c2ad326f106c3779c384e890c3e76f52
-
SHA512
fc9649667d16dcd077d9d306ff6740311566f852fca8a5baf5ea10180769cb3b8d133958ee0267e7a432428adaddcd091f92790c90db63bbb6f0d2b861b08441
-
SSDEEP
24576:HQMGWPRkqt/DGWPZkq/P7d3BFMukWMG+gcXh6dvrBV1gerPxHxmbuio8Tk3Qy0H1:2WPjt/aWP72TG+g+h6dvrBV1gerPxHx2
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087f95a5260d17a702c30fe22ef5dcf2c2ad326f106c3779c384e890c3e76f52
Files
-
087f95a5260d17a702c30fe22ef5dcf2c2ad326f106c3779c384e890c3e76f52.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 337KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yqbb Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 337KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ