Static task
static1
Behavioral task
behavioral1
Sample
c8ca6ecf1307e76feb3489cc3ad257a8efcb3dadb3fc6b574b75ff3f2154878d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c8ca6ecf1307e76feb3489cc3ad257a8efcb3dadb3fc6b574b75ff3f2154878d.exe
Resource
win10v2004-20240508-en
General
-
Target
c8ca6ecf1307e76feb3489cc3ad257a8efcb3dadb3fc6b574b75ff3f2154878d
-
Size
12KB
-
MD5
47e28434e83e6b676d96496caf16025e
-
SHA1
53828089c85fa6306312bd70d57d141f9de16da5
-
SHA256
c8ca6ecf1307e76feb3489cc3ad257a8efcb3dadb3fc6b574b75ff3f2154878d
-
SHA512
6132f3f5b441d9a118e6ce80c15ebc2fc3c73febd9873de245e479a51783d24e5e813bd6850f7afdbd38da1977984490e7d44288c94d93d9e3a2a1d7d5a42539
-
SSDEEP
384:dL7li/2zwq2DcEQvdhcJKLTp/NK9xakV:NUM/Q9ckV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ca6ecf1307e76feb3489cc3ad257a8efcb3dadb3fc6b574b75ff3f2154878d
Files
-
c8ca6ecf1307e76feb3489cc3ad257a8efcb3dadb3fc6b574b75ff3f2154878d.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ