Static task
static1
Behavioral task
behavioral1
Sample
d32699e288db928cce2cabef5be524ca9ca5cb05788dfaab4600fd679cb0e470.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d32699e288db928cce2cabef5be524ca9ca5cb05788dfaab4600fd679cb0e470.exe
Resource
win10v2004-20240508-en
General
-
Target
d32699e288db928cce2cabef5be524ca9ca5cb05788dfaab4600fd679cb0e470
-
Size
12KB
-
MD5
69ae114440e6d06fdc0c24cc523c0b44
-
SHA1
890a9460b36011b0eda4a4f0eafbf15191901642
-
SHA256
d32699e288db928cce2cabef5be524ca9ca5cb05788dfaab4600fd679cb0e470
-
SHA512
66fbde0bca0de1caafe6cc4383d474e238da6849fb3f12b0e9ffde5b75caa50c775860de2ae59821d61231abeca26cfbce0cd6571afaa14f8a52c424929603be
-
SSDEEP
384:IL7li/2zEq2DcEQvdhcJKLTp/NK9xaJO:2oM/Q9cJO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d32699e288db928cce2cabef5be524ca9ca5cb05788dfaab4600fd679cb0e470
Files
-
d32699e288db928cce2cabef5be524ca9ca5cb05788dfaab4600fd679cb0e470.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ