Static task
static1
Behavioral task
behavioral1
Sample
f8d5b1f549ca74b646ec3608e24516c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f8d5b1f549ca74b646ec3608e24516c2.exe
Resource
win10v2004-20231215-en
General
-
Target
f8d5b1f549ca74b646ec3608e24516c2
-
Size
95KB
-
MD5
f8d5b1f549ca74b646ec3608e24516c2
-
SHA1
ce2f4c4514dad63c2c6aacaac6104b834a889848
-
SHA256
552da1db8be63cb2c60bceffd0579252c56356c218ab6478ef2d50c55dab0cbe
-
SHA512
27e769e66abf192305b49cd73aafe81cc213eb13c418bf33773a72f763cf29e21459ea8a54469451839cb1e73690a9d3349f047ec3d1abb11c18dafec90a6dbc
-
SSDEEP
1536:uI/UURsiBFLQ1+a0kB54U9Y1AJdoWP4YYHzgv4KjXf8ecYeDHJ:D1VFLo+s74U9rJf4YYUPjg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8d5b1f549ca74b646ec3608e24516c2
Files
-
f8d5b1f549ca74b646ec3608e24516c2.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ