Static task
static1
Behavioral task
behavioral1
Sample
df9a7e3650b8ab89432a7ac8e79be3793ec91b7021c8e505cd6bd2da81596174.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
df9a7e3650b8ab89432a7ac8e79be3793ec91b7021c8e505cd6bd2da81596174.exe
Resource
win10v2004-20230220-en
General
-
Target
df9a7e3650b8ab89432a7ac8e79be3793ec91b7021c8e505cd6bd2da81596174.exe
-
Size
579KB
-
MD5
b5fa299c71402381a46be6d78beeb28b
-
SHA1
934b7eb6ee2e4e67ff22f4523bfe6a2a47b6a5f3
-
SHA256
df9a7e3650b8ab89432a7ac8e79be3793ec91b7021c8e505cd6bd2da81596174
-
SHA512
14ac05fe261814c0fa84e5ed858d0f603210a5b2b63e38b596e0f2d18bbbac9f7ada531a0604c6d7acee98c3b0fc333bc7725a42d7949e849e48c55a7cfc8503
-
SSDEEP
6144:+CvZQF89OVamhgTWMQ+n1ru1S8U+EcOYE0ZOu2qHS+guQzCbzVB8PQqZzHbHI5Ct:+CuFjGT/Q+n01SD+EJngnq+ezCn2b4C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df9a7e3650b8ab89432a7ac8e79be3793ec91b7021c8e505cd6bd2da81596174.exe
Files
-
df9a7e3650b8ab89432a7ac8e79be3793ec91b7021c8e505cd6bd2da81596174.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ