Static task
static1
Behavioral task
behavioral1
Sample
22f864ec6dced7f7a8fead42dfa765382e34f8eccae4e8217946e08f9d0e5c0f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22f864ec6dced7f7a8fead42dfa765382e34f8eccae4e8217946e08f9d0e5c0f.exe
Resource
win10v2004-20240226-en
General
-
Target
22f864ec6dced7f7a8fead42dfa765382e34f8eccae4e8217946e08f9d0e5c0f
-
Size
12KB
-
MD5
cf9f1bf94dd492e51f01fc682303e680
-
SHA1
9816c3ce53ea203ddfba5995fb90ddac9c52d483
-
SHA256
22f864ec6dced7f7a8fead42dfa765382e34f8eccae4e8217946e08f9d0e5c0f
-
SHA512
faca60fa19df7f926eb55d69dc544e97f1f19eca0648490566a5444a26734354d198253d37fa1d97a0f917bd10e569ee6cfe42c92b81f1a5ea7de17762aeab80
-
SSDEEP
384:/L7li/2zGq2DcEQvdQcJKLTp/NK9xaXy:zGMCQ9cXy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22f864ec6dced7f7a8fead42dfa765382e34f8eccae4e8217946e08f9d0e5c0f
Files
-
22f864ec6dced7f7a8fead42dfa765382e34f8eccae4e8217946e08f9d0e5c0f.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ