Behavioral task
behavioral1
Sample
84adcf983552692a3475008ef09b63a341b67401231b1ea8fc918022f9ec887dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
84adcf983552692a3475008ef09b63a341b67401231b1ea8fc918022f9ec887dN.exe
Resource
win10v2004-20241007-en
General
-
Target
84adcf983552692a3475008ef09b63a341b67401231b1ea8fc918022f9ec887dN
-
Size
7KB
-
MD5
d10039aaff061ebbc63273457dbe70e0
-
SHA1
88363c6d8e6941bd9df6df34f5dc94bed9183eb4
-
SHA256
84adcf983552692a3475008ef09b63a341b67401231b1ea8fc918022f9ec887d
-
SHA512
033287ca0da85292fb89fbfccea30ae8967f4bdab016591c8e882586e09fa76dccc9f401e354e07cbd76c2e38f66a927720dcd3338c6b7c2dcd663befaa46e07
-
SSDEEP
24:eFGStrJ9u0/6tenZdkBQAV286WYxYKLqoIeNDMSCvOXpmB:is042kBQMixYFSD9C2kB
Malware Config
Extracted
metasploit
metasploit_stager
192.168.98.40:7777
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84adcf983552692a3475008ef09b63a341b67401231b1ea8fc918022f9ec887dN
Files
-
84adcf983552692a3475008ef09b63a341b67401231b1ea8fc918022f9ec887dN.exe windows:4 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fqyw Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE