Static task
static1
Behavioral task
behavioral1
Sample
c0736ad4b8e2815f8c0495d528d20e1cfc8d439768b1061013d58c0235948ba0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c0736ad4b8e2815f8c0495d528d20e1cfc8d439768b1061013d58c0235948ba0N.exe
Resource
win10v2004-20241007-en
General
-
Target
c0736ad4b8e2815f8c0495d528d20e1cfc8d439768b1061013d58c0235948ba0N
-
Size
47KB
-
MD5
d1e6c3712198467b8c6a232772a93fd0
-
SHA1
49664fc7ca5b130fe7fdd690c69a685027453a64
-
SHA256
c0736ad4b8e2815f8c0495d528d20e1cfc8d439768b1061013d58c0235948ba0
-
SHA512
97c37a663758d929bcc0cd82e87bec83a58fa2767792c1c23e24c00b420ef2f0c5955625a71443d6a7998fcfe788b4aa6de3ac89c43f12963a470a75b2e7c29d
-
SSDEEP
768:b4KUgtdZjc0JUCqzhUYfnun9YE5XbOfq1ukT8d7mnkHj5Y+mRxbnlz:b4KUgtdZjc0JgzhTyY0bOaT8cQ2+mRxV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0736ad4b8e2815f8c0495d528d20e1cfc8d439768b1061013d58c0235948ba0N
Files
-
c0736ad4b8e2815f8c0495d528d20e1cfc8d439768b1061013d58c0235948ba0N.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ