Static task
static1
General
-
Target
ESP_Launcher.exe
-
Size
109KB
-
MD5
ab37f74c4c38412588f16449744a6b23
-
SHA1
2a21eb9beb00bee63dcfcdb1b902fc9198ed4c81
-
SHA256
8cae2140c5cf9b8a1bba4e4eff911003d88698ce9d4a3f4be7792694b698b8cf
-
SHA512
cd5bad537026e7e340603a9bc7ff38c61301788f1a65b2bcbc292549d78ee84a62c4088afada8e3ad868ad4550ebde8c7d1b6a2e5cd8df7158211b80e2efce67
-
SSDEEP
768:tv9hvwNTksUN4NHYmPVNfNt/bOrq3vJemc29:59h4S23BeHw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ESP_Launcher.exe
Files
-
ESP_Launcher.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ