Static task
static1
Behavioral task
behavioral1
Sample
2e435d21473c0eb8a44b7219ff7df352a78f8821c85a008b809f00778c347660.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2e435d21473c0eb8a44b7219ff7df352a78f8821c85a008b809f00778c347660.exe
Resource
win10v2004-20240426-en
General
-
Target
2e435d21473c0eb8a44b7219ff7df352a78f8821c85a008b809f00778c347660
-
Size
12KB
-
MD5
6983beaa68d58a02e9fa6a80d1ecce31
-
SHA1
40f8bc5fb376d4ddbdbdad3cfa4ebb33fe0abe12
-
SHA256
2e435d21473c0eb8a44b7219ff7df352a78f8821c85a008b809f00778c347660
-
SHA512
530e2346a3fb5f4c4abd5773301912f98af4a97bdea5c3aa609d93aea73fa21db6130b9d6113556088b9cffbfd8cc43bdb0a53db02734ee8695fea90915c3712
-
SSDEEP
384:2L7li/2zLq2DcEQvdQcJKLTp/NK9xa3C:wPMCQ9c3C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e435d21473c0eb8a44b7219ff7df352a78f8821c85a008b809f00778c347660
Files
-
2e435d21473c0eb8a44b7219ff7df352a78f8821c85a008b809f00778c347660.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ