Static task
static1
Behavioral task
behavioral1
Sample
ce662df1e30e3b43b169e763bee3c5a11e4104589729af54ba61c73d8322c9ba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ce662df1e30e3b43b169e763bee3c5a11e4104589729af54ba61c73d8322c9ba.exe
Resource
win10v2004-20240426-en
General
-
Target
ce662df1e30e3b43b169e763bee3c5a11e4104589729af54ba61c73d8322c9ba
-
Size
12KB
-
MD5
557c4cf7d39afe796421b12519869cb3
-
SHA1
8b5d56c62c5a9c11c4034b415093f1e3f57cf5d2
-
SHA256
ce662df1e30e3b43b169e763bee3c5a11e4104589729af54ba61c73d8322c9ba
-
SHA512
2c184d6f650562bd64ce0048b25669bd467685e0106841a0ff67bcc62a28371bf21a5c84ca58f89cd986558c7e774de4dcfdd7a1a172ba35e6f06b1907655433
-
SSDEEP
384:5L7li/2z9q2DcEQvdQcJKLTp/NK9xaZu:J1MCQ9cZu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce662df1e30e3b43b169e763bee3c5a11e4104589729af54ba61c73d8322c9ba
Files
-
ce662df1e30e3b43b169e763bee3c5a11e4104589729af54ba61c73d8322c9ba.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ