Static task
static1
Behavioral task
behavioral1
Sample
host.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
host.exe
Resource
win10v2004-20231215-en
General
-
Target
host.exe
-
Size
12.1MB
-
MD5
6990f15644bed7832756b34ec6e52978
-
SHA1
87895cf915710c5865c8c8c83cb21d8f70efec04
-
SHA256
ee0e808a125680c1b5ac91dbfb4710e7c925000e1302e18a1ae769f425168187
-
SHA512
5dcc2694dbd2d6e4d45c09884efa4bee0b47be7d0b4fbef49bbcf3153eb25966ab9ce98dca8a9074b1d13e7849491508fec154610e221cc525984ae52b6c7675
-
SSDEEP
196608:tE25Xbd6LXx436QhPw2wmp+i2AjsGRyo9B3ppFlD304nG3BT+DFvywKew96vVIRR:tE2FILhODwlAwGMItpl3znGOdk4yRnR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource host.exe
Files
-
host.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.1MB - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ