Static task
static1
Behavioral task
behavioral1
Sample
f400dcc116adb3dd2c25c4e2e880a21a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f400dcc116adb3dd2c25c4e2e880a21a.exe
Resource
win10v2004-20240226-en
General
-
Target
f400dcc116adb3dd2c25c4e2e880a21a
-
Size
12KB
-
MD5
f400dcc116adb3dd2c25c4e2e880a21a
-
SHA1
baab60a17443b4b4db12c753667a05225645d122
-
SHA256
d9bc5704fe2db57f6907ed4c4869b77b9b4d35856b09e8a9c808eda4a840d52a
-
SHA512
31ed21162d473836401803037d9c8f8064998b7d9816c0c2200b7860c28df2da905b4575dec068f9fad3b53171ad2f8e117cdef647c2da8c628aa886e6fbde45
-
SSDEEP
384:OL7li/2zbq2DcEBvdScJKLTp/NK9xaW2:Y/DIQ9cW2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f400dcc116adb3dd2c25c4e2e880a21a
Files
-
f400dcc116adb3dd2c25c4e2e880a21a.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ