Behavioral task
behavioral1
Sample
941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66.exe
Resource
win10v2004-20241007-en
General
-
Target
941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66.exe
-
Size
1KB
-
MD5
f2ce3c73b93dbf46f5f6eafa9802018f
-
SHA1
f262b2bf23ecba4b5e0125fdb224978b94394165
-
SHA256
941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66
-
SHA512
5a10152484d20d2d77688d4aca5464d1446bdb3ff4f489f6548240a564e6a0b4d8e5f5bb63f1c1b4affb3d1343a96363ee7fe7c5408122965646b65eac7ec216
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/shell_reverse_tcp
192.168.36.128:9999
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66.exe
Files
-
941bd103d88dfe1636547f0c38d1cafcf820455cf8e137908c9fac8b3a2eef66.exe.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
wha13 Size: 351B - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE