Behavioral task
behavioral1
Sample
7e4ec9679dcbd2fefd484393d89b99f7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7e4ec9679dcbd2fefd484393d89b99f7.exe
Resource
win10v2004-20231215-en
General
-
Target
7e4ec9679dcbd2fefd484393d89b99f7.exe
-
Size
144KB
-
MD5
7e4ec9679dcbd2fefd484393d89b99f7
-
SHA1
f752358e01cd282c45646d25884e3b2571647f1c
-
SHA256
dc2b0938a7828761d6e4028aa0341ae6d3b330aa17e0d37ae22650fcf2c7bea1
-
SHA512
cafb487233eb8d7cf1f70b729d58611a2250637e0cb200dd1b3880863600255392f87e092a5cc87edd89ffa5e82853f5c6f224a64b1cd291d67170ff09a2988d
-
SSDEEP
768:tdUSiAKQH31cmK2C2C2MgbKrMPS7CL7RKfrA+Hf10+1qR8oUuVUoxDu1HH/zJcH/:rUS3Ki32mKZZ5gt3Qq+19oUuGsurV0
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e4ec9679dcbd2fefd484393d89b99f7.exe
Files
-
7e4ec9679dcbd2fefd484393d89b99f7.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ