Static task
static1
Behavioral task
behavioral1
Sample
DaHostexe.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
DaHostexe.exe
Resource
win10v2004-20230621-en
General
-
Target
DaHostexe.exe
-
Size
404KB
-
MD5
ca780152698dfec08f016967caaf928b
-
SHA1
7823e6982d3896174a7eae319583b38ae1f1f410
-
SHA256
6871decd4be4134f134232294b91c39181b00ffa0066476ca504455283a8a6f4
-
SHA512
e3d27f48259200b2b14a8857a38cbce054ddb68f89b436f55c82fb50b17b94800341b4c321c07b22c15461dfa89f7a771f11f99dda0d8e63c6d3bdac95f4a832
-
SSDEEP
3072:1PNE7rLSVGsTc9mAp1LE0+JXqgstrxaADCT1qhbyMtx43f1KGbF2JkW:8HLVku1LEhJXqgia4wclye433bFTW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DaHostexe.exe
Files
-
DaHostexe.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ