Static task
static1
Behavioral task
behavioral1
Sample
mapper.exe
Resource
win10v2004-20240226-en
General
-
Target
mapper.exe
-
Size
12KB
-
MD5
34971f3bb157d0e9239fba75b00923c9
-
SHA1
30921c9f83b9893447b13b0196b5bf1d668317e5
-
SHA256
0ec4ddc14b405e679b7d84cf497b37eea9d7fceab795a575d54d3a37e5a2bfe6
-
SHA512
706a6f1b0c338aee6ec2f9c56b63e5123d9eac555095d2c91eb2fe2931ad46d91776e2d1dc145eb31de319ef11b1b39802ac2f6e8e4570839788af642768fec7
-
SSDEEP
192:HgFwFDVdfG0nG7ljt4yb+mv1ZcmKfGxj8Jgh:HiODt4Rv+IcmKfGxjp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mapper.exe
Files
-
mapper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rose Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ