Static task
static1
Behavioral task
behavioral1
Sample
765f52d6a22596cc2ccc30840a1c2f93199bd00f328f2662936693e0fbfbaf91.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
765f52d6a22596cc2ccc30840a1c2f93199bd00f328f2662936693e0fbfbaf91.exe
Resource
win10v2004-20240426-en
General
-
Target
765f52d6a22596cc2ccc30840a1c2f93199bd00f328f2662936693e0fbfbaf91
-
Size
12KB
-
MD5
f0ddbf714d926e3f35a60dbc407cb001
-
SHA1
433c73eb8bbd4abf3a6de4601ac038146ac31e0e
-
SHA256
765f52d6a22596cc2ccc30840a1c2f93199bd00f328f2662936693e0fbfbaf91
-
SHA512
a3292a8bc6e5bacc7e89dc3b7389374b25a4e197aaa6d486c78e3bfd5610c97ee9d4bc420d980f2b594f2d6464d74c1262429715fbe7ab31d0447850e160baa6
-
SSDEEP
384:sL7li/2zJq2DcEQvdQcJKLTp/NK9xar/:qpMCQ9cr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 765f52d6a22596cc2ccc30840a1c2f93199bd00f328f2662936693e0fbfbaf91
Files
-
765f52d6a22596cc2ccc30840a1c2f93199bd00f328f2662936693e0fbfbaf91.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ