Behavioral task
behavioral1
Sample
1e7f07add8d8b88c7bd11c2062abcc8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e7f07add8d8b88c7bd11c2062abcc8b.exe
Resource
win10v2004-20231215-en
General
-
Target
1e7f07add8d8b88c7bd11c2062abcc8b
-
Size
72KB
-
MD5
1e7f07add8d8b88c7bd11c2062abcc8b
-
SHA1
2bb2c2c22528aa06fc99a61c1aa6e2127cee2a17
-
SHA256
02a1e64bb542b41d850067653efbf58fbf1f8a3ff128474bee3ec108f0bc7997
-
SHA512
dceb8f2b28cea670db0f6aca4be8a317098a442c9c0125b9c68193ccb3aefb9a6e103239f0002a45d19acd17807bf75040b5d16c22f3402509fb1f981cc64ec3
-
SSDEEP
1536:I8/0LytG4SPHNBxOzwcnwpGD9pOMN+eTlNc8Qsfq39:d/0TPEzw3Ge+lNc8QsQ9
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
192.168.1.106:4444
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e7f07add8d8b88c7bd11c2062abcc8b
Files
-
1e7f07add8d8b88c7bd11c2062abcc8b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Sections
.ufyu Size: 44KB - Virtual size: 42KB
IMAGE_SCN_MEM_READ
.'data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.'s'c Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ