Static task
static1
Behavioral task
behavioral1
Sample
dfd328ba369b500aea044ca1ee36ab3a5971ad69e98e59ad814183151826b005.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
dfd328ba369b500aea044ca1ee36ab3a5971ad69e98e59ad814183151826b005.exe
Resource
win10v2004-20230703-en
General
-
Target
dfd328ba369b500aea044ca1ee36ab3a5971ad69e98e59ad814183151826b005
-
Size
2.3MB
-
MD5
b6674db6273a33055fe4e049cf697932
-
SHA1
49eb27bde15f34074757526b5c13eb79a72d05b6
-
SHA256
dfd328ba369b500aea044ca1ee36ab3a5971ad69e98e59ad814183151826b005
-
SHA512
441e83ebb3b8bdb073e39228eff48cc22ee32224e444c999bd4a6b7293df47c4748c8fd02b53f46bf41f6f6575d2d503cf3a5f254d262be5b29311069959182c
-
SSDEEP
24576:3fWl8KuqGavkg3NyNIbbbIoIBAUZLYFCG3TBp:3s8KuqGaX0ToIBAUZLY8sp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfd328ba369b500aea044ca1ee36ab3a5971ad69e98e59ad814183151826b005
Files
-
dfd328ba369b500aea044ca1ee36ab3a5971ad69e98e59ad814183151826b005.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
ASP0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ASP1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ylrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE