Static task
static1
Behavioral task
behavioral1
Sample
17e5ff7f311fe6ca4618a22c0288c7a5572152237a2b7291e336aecc9ac93128.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17e5ff7f311fe6ca4618a22c0288c7a5572152237a2b7291e336aecc9ac93128.exe
Resource
win10v2004-20240508-en
General
-
Target
17e5ff7f311fe6ca4618a22c0288c7a5572152237a2b7291e336aecc9ac93128
-
Size
12KB
-
MD5
62b9a09f77662ed3168350dabfb34c9a
-
SHA1
387618437fc9b9b7db2c2ee0175e0ab37ddb2997
-
SHA256
17e5ff7f311fe6ca4618a22c0288c7a5572152237a2b7291e336aecc9ac93128
-
SHA512
065d6d8eafb7d426a112f85ec201ee2caafd83178864e7e68ad6ce9a5b3658561f21015e4c9b99fa2dd0e323f32c4cf5de6a5da67b65186ffde49fdd5df1c25d
-
SSDEEP
384:+L7li/2z8q2DcEQvdhcJKLTp/NK9xaUR:oIM/Q9cUR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17e5ff7f311fe6ca4618a22c0288c7a5572152237a2b7291e336aecc9ac93128
Files
-
17e5ff7f311fe6ca4618a22c0288c7a5572152237a2b7291e336aecc9ac93128.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ