Static task
static1
Behavioral task
behavioral1
Sample
caea71dc9cf5f289a396c0359c4b37f8ccc92d647bda785dbbfa146efea3022d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
caea71dc9cf5f289a396c0359c4b37f8ccc92d647bda785dbbfa146efea3022d.exe
Resource
win10v2004-20240508-en
General
-
Target
caea71dc9cf5f289a396c0359c4b37f8ccc92d647bda785dbbfa146efea3022d
-
Size
12KB
-
MD5
b2cbde37d1adea5cfc70a135b6fda855
-
SHA1
3e5340e07f662bd9499e4bf568aa71bfdfca2800
-
SHA256
caea71dc9cf5f289a396c0359c4b37f8ccc92d647bda785dbbfa146efea3022d
-
SHA512
400297a3509bfc10bbf81f2bc9d749be0b5b402fd4065ec80c02b792bb7565f16ebd5864a8ac82b2a34e1c2e3ec3bffa36f3e8e7ac8891444a49ef2e2913e23e
-
SSDEEP
384:PL7li/2z4q2DcEQvdQcJKLTp/NK9xaSr:jUMCQ9cSr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caea71dc9cf5f289a396c0359c4b37f8ccc92d647bda785dbbfa146efea3022d
Files
-
caea71dc9cf5f289a396c0359c4b37f8ccc92d647bda785dbbfa146efea3022d.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ