Static task
static1
Behavioral task
behavioral1
Sample
171262d8a73dcbd852e2cc32e015d94bc0cfd94b4768b36250423c502ce18ae1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
171262d8a73dcbd852e2cc32e015d94bc0cfd94b4768b36250423c502ce18ae1.exe
Resource
win10v2004-20240508-en
General
-
Target
171262d8a73dcbd852e2cc32e015d94bc0cfd94b4768b36250423c502ce18ae1
-
Size
12KB
-
MD5
924c47f1e6b3f5ae8e6f27169aaaa272
-
SHA1
a7ee19163633abfb4b97c14651c96b318871547c
-
SHA256
171262d8a73dcbd852e2cc32e015d94bc0cfd94b4768b36250423c502ce18ae1
-
SHA512
3f9c318e3a65f782fec3c5d53e00c7636241ebc830e4ea0678e38fdbfaca2ee91e9f4c3f9a0c23cf36bf15bbd47cb7d46e505ab6723fecd1762f1f2c76f38426
-
SSDEEP
384:CL7li/2z0q2DcEQvdhcJKLTp/NK9xahW:c4M/Q9chW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 171262d8a73dcbd852e2cc32e015d94bc0cfd94b4768b36250423c502ce18ae1
Files
-
171262d8a73dcbd852e2cc32e015d94bc0cfd94b4768b36250423c502ce18ae1.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ