Static task
static1
Behavioral task
behavioral1
Sample
1a9b5705cc985fb68aefd77f9638cc3d2c322f6c09b272e935de193901c77f07.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1a9b5705cc985fb68aefd77f9638cc3d2c322f6c09b272e935de193901c77f07.exe
Resource
win10v2004-20240508-en
General
-
Target
1a9b5705cc985fb68aefd77f9638cc3d2c322f6c09b272e935de193901c77f07
-
Size
12KB
-
MD5
056d8cad0a3b19f18923ce4a5d18acbf
-
SHA1
5d42dd7af0719ae970f0ddc96f14ac15b67d9e91
-
SHA256
1a9b5705cc985fb68aefd77f9638cc3d2c322f6c09b272e935de193901c77f07
-
SHA512
4a2471aa699663b41f92562bf40461d6e63badae11f16603061102cd521e9638a61ae9ddbe4df888e065ed39024fad008a4b86a63ffb879aa95247544f10f1db
-
SSDEEP
384:5L7li/2zwq2DcEQvdhcJKLTp/NK9xarfX:J0M/Q9crfX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a9b5705cc985fb68aefd77f9638cc3d2c322f6c09b272e935de193901c77f07
Files
-
1a9b5705cc985fb68aefd77f9638cc3d2c322f6c09b272e935de193901c77f07.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ