Static task
static1
Behavioral task
behavioral1
Sample
1c58724c8695d81c7b73723a8d0e2d73a9f356db3f2aaf3ca8a1b73d5afbfd17.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c58724c8695d81c7b73723a8d0e2d73a9f356db3f2aaf3ca8a1b73d5afbfd17.exe
Resource
win10v2004-20240508-en
General
-
Target
1c58724c8695d81c7b73723a8d0e2d73a9f356db3f2aaf3ca8a1b73d5afbfd17
-
Size
12KB
-
MD5
a042a5e6759d32f58ad8102fabef8e6f
-
SHA1
09a925cf00a62ecb38cf7c2963f9c02faf960a6c
-
SHA256
1c58724c8695d81c7b73723a8d0e2d73a9f356db3f2aaf3ca8a1b73d5afbfd17
-
SHA512
a28e56f938e189a69d27ee725ae12898124ec2ce999686263ba0f7bfcbf3f1953876b44fb3934becf304ee252ce5dadf19e3378a2f6807d3313e90c5aa5ef338
-
SSDEEP
384:9L7li/2zGq2DcEQvdhcJKLTp/NK9xagS:tGM/Q9cgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c58724c8695d81c7b73723a8d0e2d73a9f356db3f2aaf3ca8a1b73d5afbfd17
Files
-
1c58724c8695d81c7b73723a8d0e2d73a9f356db3f2aaf3ca8a1b73d5afbfd17.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ