Static task
static1
Behavioral task
behavioral1
Sample
383168e03574c629e54d873f5469e80f325681c8851103c5f0044b85a37ca2af.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
383168e03574c629e54d873f5469e80f325681c8851103c5f0044b85a37ca2af.exe
Resource
win10v2004-20240508-en
General
-
Target
383168e03574c629e54d873f5469e80f325681c8851103c5f0044b85a37ca2af
-
Size
12KB
-
MD5
03309306d832ab092d716abc440f5c99
-
SHA1
5a73de3202f01869d7fb24149e7f3875c1e1f086
-
SHA256
383168e03574c629e54d873f5469e80f325681c8851103c5f0044b85a37ca2af
-
SHA512
988ff3d05e5bbc37d92b6234c656f040f3b7616b8225b1060b8fcfe5ed5925629002df4219181cccc6f85468fe8603a7d8490713d65e8385f0baa7ab96d27b9e
-
SSDEEP
384:pL7li/2zbq2DcEQvdhcJKLTp/NK9xa6s:ZfM/Q9c6s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383168e03574c629e54d873f5469e80f325681c8851103c5f0044b85a37ca2af
Files
-
383168e03574c629e54d873f5469e80f325681c8851103c5f0044b85a37ca2af.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ