Static task
static1
Behavioral task
behavioral1
Sample
51723dfa69a6a8244353fd1aed7890be9857f6d72780840b522821ab4a3eb919.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
51723dfa69a6a8244353fd1aed7890be9857f6d72780840b522821ab4a3eb919.exe
Resource
win10v2004-20240508-en
General
-
Target
51723dfa69a6a8244353fd1aed7890be9857f6d72780840b522821ab4a3eb919
-
Size
12KB
-
MD5
b472db176d67faa70f35a7329cd117d6
-
SHA1
c78e5523992e9c1ca571d8139adc45cd1732a456
-
SHA256
51723dfa69a6a8244353fd1aed7890be9857f6d72780840b522821ab4a3eb919
-
SHA512
7e2666254c62236804b2a1ff892957385f0a619c74db410ba50f1b6cebb13bc629b52e4fa0e5228c52fb01ae62a2a7b63252c95f7a031d1a69464b514be837fb
-
SSDEEP
384:IL7li/2z/q2DcEQvdhcJKLTp/NK9xa9U:2rM/Q9c9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51723dfa69a6a8244353fd1aed7890be9857f6d72780840b522821ab4a3eb919
Files
-
51723dfa69a6a8244353fd1aed7890be9857f6d72780840b522821ab4a3eb919.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ