Static task
static1
Behavioral task
behavioral1
Sample
8e38099d0c7c43de11ebf45b8db996a3cb5fcf98d034bef935cc236f2cd804a3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8e38099d0c7c43de11ebf45b8db996a3cb5fcf98d034bef935cc236f2cd804a3.exe
Resource
win10v2004-20240508-en
General
-
Target
8e38099d0c7c43de11ebf45b8db996a3cb5fcf98d034bef935cc236f2cd804a3
-
Size
12KB
-
MD5
784f2b5309be6ecb335f0091497f227f
-
SHA1
f2c92cc289c042e7541d5586d1bb5faae3933d2d
-
SHA256
8e38099d0c7c43de11ebf45b8db996a3cb5fcf98d034bef935cc236f2cd804a3
-
SHA512
588cf577dbcf4d3fe88ddbc99c236cc937626b88ad1d6b04c8949c4f0df9b4641a890e8a57a5929421074525538abc141c59eb4108e47d63a7ec784369ca350c
-
SSDEEP
384:CL7li/2zTq2DcEQvdfcJKLTp/NK9xafw:cfMZQ9cfw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e38099d0c7c43de11ebf45b8db996a3cb5fcf98d034bef935cc236f2cd804a3
Files
-
8e38099d0c7c43de11ebf45b8db996a3cb5fcf98d034bef935cc236f2cd804a3.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ