Overview

overview

10

Static

static

10

040.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    040.exe
  • Size 371KB
  • Sample220701-yy6kdsaghj
  • SHA256 d113f0b72805c9908272e053fcc5386b191254cbaf685ed66bca824d3d4a94dc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
infostealerdiamondfox

Malware Config

Signatures

  • DiamondFox payload 1 IoCs

    Detects DiamondFox payload in file/memory.

    infostealer
  • Diamondfox family
    diamondfox

File Explorer

  • 040.exe
    .exe 371KB

040.exe

  • IMPHASH 8316bcd12417e59032ab566efaeaa8d5
  • SHA256 d113f0b72805c9908272e053fcc5386b191254cbaf685ed66bca824d3d4a94dc
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • DiamondFox payload

    Detects DiamondFox payload in file/memory.

    infostealer

PE Signature issue

Digest
9a:9d:fe:2d:a4:46:64:6e:7d:28:67:4c:7a:53:3e:a2:80:04:90:de:1d:1d:9b:d1:14:7c:94:bd:b2:72:a2:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Minor OS version
Major OS version
Entry point
4096
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_NET_RUN_FROM_SWAP IMAGE_FILE_SYSTEM
PDB paths