Static task
static1
Behavioral task
behavioral1
Sample
af9715190438181bcc3942dba4a52c28642cb546e3289717872f29f4fa150b31.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
af9715190438181bcc3942dba4a52c28642cb546e3289717872f29f4fa150b31.exe
Resource
win10v2004-20240412-en
General
-
Target
af9715190438181bcc3942dba4a52c28642cb546e3289717872f29f4fa150b31
-
Size
12KB
-
MD5
13cfc27ba2a7fcb26c537c9c613e6f0c
-
SHA1
660c977f4d56f736362f37741789da57c704c2e3
-
SHA256
af9715190438181bcc3942dba4a52c28642cb546e3289717872f29f4fa150b31
-
SHA512
5c7074ed4d4be795c0df07468bfd795574bfb96c75397d84d135b2c2a437da4c684650c6f3149ad81a240cf7dcca8a4fe9da74a998b6f970d2d265f29566a804
-
SSDEEP
384:mL7li/2zpq2DcEQvdhcJKLTp/NK9xa19:AxM/Q9c19
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af9715190438181bcc3942dba4a52c28642cb546e3289717872f29f4fa150b31
Files
-
af9715190438181bcc3942dba4a52c28642cb546e3289717872f29f4fa150b31.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ