Static task
static1
Behavioral task
behavioral1
Sample
4d45d73745ca03d6108b51c55eed0c4f29cdf2da1c302ad1f975a75e1dc47006.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4d45d73745ca03d6108b51c55eed0c4f29cdf2da1c302ad1f975a75e1dc47006.exe
Resource
win10v2004-20240426-en
General
-
Target
4d45d73745ca03d6108b51c55eed0c4f29cdf2da1c302ad1f975a75e1dc47006
-
Size
12KB
-
MD5
65a8f8843b8bbcd25c4e02ad0e9e3631
-
SHA1
8fccbbb6cb4d75395f59b23eb93d175f3586d984
-
SHA256
4d45d73745ca03d6108b51c55eed0c4f29cdf2da1c302ad1f975a75e1dc47006
-
SHA512
939dc38f360344105711c783d1c5714c25a3f8f74771971e7bcdb6107a968504c05ec3c46dcb247b98da70ad0094024f94980a561c39da85ff6763e6fcbf65bf
-
SSDEEP
384:iL7li/2zpq2DcEQvdQcJKLTp/NK9xaPN:8JMCQ9cPN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d45d73745ca03d6108b51c55eed0c4f29cdf2da1c302ad1f975a75e1dc47006
Files
-
4d45d73745ca03d6108b51c55eed0c4f29cdf2da1c302ad1f975a75e1dc47006.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ