Static task
static1
Behavioral task
behavioral1
Sample
3fef911e58831ea0a6e7b8930648a40c2d1fece42dcf65235a92ae2f6166f762.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3fef911e58831ea0a6e7b8930648a40c2d1fece42dcf65235a92ae2f6166f762.exe
Resource
win10v2004-20240508-en
General
-
Target
3fef911e58831ea0a6e7b8930648a40c2d1fece42dcf65235a92ae2f6166f762
-
Size
12KB
-
MD5
c4879ddf88d7615fe7ac5d7eff26ec41
-
SHA1
97d00f90778fd5d1aa1623ca4bd093c6a9360a09
-
SHA256
3fef911e58831ea0a6e7b8930648a40c2d1fece42dcf65235a92ae2f6166f762
-
SHA512
ee263f3bc0ae966ecc7eccd9b5a0aca9c876a50a66edd4d39bb3a5a7e5ec9f65d3486fa597c56e4b474020b957174d52d3183d69342ed0fdf10b69d8cc3fc43b
-
SSDEEP
384:SL7li/2zgq2DcEQvdQcJKLTp/NK9xa/j:MEMCQ9c/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fef911e58831ea0a6e7b8930648a40c2d1fece42dcf65235a92ae2f6166f762
Files
-
3fef911e58831ea0a6e7b8930648a40c2d1fece42dcf65235a92ae2f6166f762.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ