Static task
static1
Behavioral task
behavioral1
Sample
92f052ff433283868ad4e1aafcf4c5ec8d3f18ef5ed84ab96bd2f34f96b03cdd.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
92f052ff433283868ad4e1aafcf4c5ec8d3f18ef5ed84ab96bd2f34f96b03cdd.exe
Resource
win10v2004-20240426-en
General
-
Target
92f052ff433283868ad4e1aafcf4c5ec8d3f18ef5ed84ab96bd2f34f96b03cdd
-
Size
12KB
-
MD5
16a6fd91be5e69766583703216f4e20d
-
SHA1
501a87abf74d6c61c163421f2b9881c6f4efe343
-
SHA256
92f052ff433283868ad4e1aafcf4c5ec8d3f18ef5ed84ab96bd2f34f96b03cdd
-
SHA512
a30e3515f01156bcb54c5f6d728b65c8a03f9f62351c0a17a5145f726bba32f9556b4a176fe7704d0c857f2f321a353cc2937000cf58fa12adbccc9c3ec0a7f3
-
SSDEEP
384:QL7li/2zUq2DcEQvdhcJKLTp/NK9xaZX:OoM/Q9cZX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92f052ff433283868ad4e1aafcf4c5ec8d3f18ef5ed84ab96bd2f34f96b03cdd
Files
-
92f052ff433283868ad4e1aafcf4c5ec8d3f18ef5ed84ab96bd2f34f96b03cdd.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ