Static task
static1
Behavioral task
behavioral1
Sample
MultiHashChecker.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
MultiHashChecker.exe
Resource
win10v2004-20240802-en
General
-
Target
MultiHashChecker.exe
-
Size
3.3MB
-
MD5
200d8fc837f0fea50c05e8151efd4a62
-
SHA1
32f890fe211dd6aed488f3e3f22dbe0b3720a6ab
-
SHA256
74ef6933f4a625a2cbe85921b6bf648c23c40ba9eabbd42bb5e2bf6530f1a235
-
SHA512
f8dfdb4652b98d50e3fddb4e398f060a88efdaa66b93244044f2b4cd18d719dfd4074e584ab3ccc6a605a34069637ced2b8cce67c25fa8234a442b5f73f37a66
-
SSDEEP
49152:RPgDbU3JfAqbHO1aonMe5JoP2m/7MuWCzEEfuery4XDjTeAx1lseyA49aP1:RP7A8Hw9yMudLhrrXHThx1eI49aP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MultiHashChecker.exe
Files
-
MultiHashChecker.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ