Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.MSIL.Agent.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.MSIL.Agent.exe
Resource
win10v2004-20240226-en
General
-
Target
HEUR-Trojan.MSIL.Agent.gen-ebe8b26d4cc38906c20bb0b26ddfd657f813d37e81871a0e98339ff4a875982e
-
Size
12KB
-
MD5
edc2082943b67ff8e64a94219d7747c0
-
SHA1
80bf92bd0d72a92c34cac22d066c3cd631bdf31d
-
SHA256
ebe8b26d4cc38906c20bb0b26ddfd657f813d37e81871a0e98339ff4a875982e
-
SHA512
1861cb6641b06222f55b1e29b0d25006419fbf85dbf52da33cd61777921923f70e1fd7025bdf24f9797765f4fe407ea1e8bf50816b11b8edfc4540a6ea8d77ca
-
SSDEEP
384:AL7li/2zQq2DcEQvdacJKLTp/NK9xaEd:ecMIQ9cEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.MSIL.Agent.gen-ebe8b26d4cc38906c20bb0b26ddfd657f813d37e81871a0e98339ff4a875982e
Files
-
HEUR-Trojan.MSIL.Agent.gen-ebe8b26d4cc38906c20bb0b26ddfd657f813d37e81871a0e98339ff4a875982e.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ