Static task
static1
Behavioral task
behavioral1
Sample
dfas.exe
Resource
win10-20220812-en
General
-
Target
dfas.exe
-
Size
52KB
-
MD5
80f42219a26ac283b7d28893cadbe330
-
SHA1
e093b078d449f8bee060975e495edef5b27fe118
-
SHA256
fc583fc1858c35cec555599c9806a7e1e2ab587e786f91eef3f8b815a19d9962
-
SHA512
f1731801726010d68cc670eee4a7d8afa0f44d67d530258d89189e802b79cf2eec34d60cdbf9886006af79eacccde8a90615d12bc964fb0c515053f38b6f7759
-
SSDEEP
1536:9KMoWupsWG9NZoF8mDZb099t5z/OuW8f:9KM6psT9voF80Zb0tx/Ou1
Malware Config
Signatures
Files
-
dfas.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ