Static task
static1
Behavioral task
behavioral1
Sample
17540a276782e5aae385a46cbaf13f6c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17540a276782e5aae385a46cbaf13f6c.exe
Resource
win10v2004-20231215-en
General
-
Target
17540a276782e5aae385a46cbaf13f6c
-
Size
434KB
-
MD5
17540a276782e5aae385a46cbaf13f6c
-
SHA1
476768a4655241bad034032f561ff873c6a0cb98
-
SHA256
dcea25b3852204ae491f4c3df217609b2d749100895f9454e0fd7d7370923c28
-
SHA512
861a669e42e53c33118a51fc573e39ce2645ace1975ecb246dad1afc65b83ee97356623d7f9da5f46fc04e342d3839c54e1732ebf9803f310e3302a4df99aa5f
-
SSDEEP
6144:DIvWS8BgHv9CF2idZecnl20lHRxp3gOncduD7yB9VCO6Sco4q8+dE6Cq5pgplKB:DIejO4F3Z4mxxlDqVTVOCLqA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17540a276782e5aae385a46cbaf13f6c
Files
-
17540a276782e5aae385a46cbaf13f6c.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE