Behavioral task
behavioral1
Sample
1814360ae6f9e98846ae92e17e71e11a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1814360ae6f9e98846ae92e17e71e11a.exe
Resource
win10v2004-20231215-en
General
-
Target
1814360ae6f9e98846ae92e17e71e11a
-
Size
1KB
-
MD5
1814360ae6f9e98846ae92e17e71e11a
-
SHA1
09185f33d6dceb395cf4e4b8348f35a97ae0b31b
-
SHA256
27df3661a7c08fa975a817569c6d6902d22f32e52c6af379f3cdb7c4633e424b
-
SHA512
39fabf51427cde6f21441baa7c216eb69594fb21e604a089c62b814d22388f7530b1431644161ad8d0169507b3585a6fb1d844e2a1b6f10934c97839f2ec24fc
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
10.1.150.18:1969
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1814360ae6f9e98846ae92e17e71e11a
Files
-
1814360ae6f9e98846ae92e17e71e11a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
__NASMDE Size: 328B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
relocs Size: 12B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ