Static task
static1
Behavioral task
behavioral1
Sample
df3645092c2ec6646749347b5274bdc8028ede89c0f89fbbbc04b0c3f7e15213.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
df3645092c2ec6646749347b5274bdc8028ede89c0f89fbbbc04b0c3f7e15213.exe
Resource
win10v2004-20230915-en
General
-
Target
df3645092c2ec6646749347b5274bdc8028ede89c0f89fbbbc04b0c3f7e15213
-
Size
265KB
-
MD5
f52b6867d45e3dac066b6754ab051363
-
SHA1
74a41ecc37259489d1f7ea457a30dadaa1e8eb60
-
SHA256
df3645092c2ec6646749347b5274bdc8028ede89c0f89fbbbc04b0c3f7e15213
-
SHA512
c2e7c8665a82c4623a0f7cdc1942de642ac79832b3b9d1a583c218500e4e68f5104f66547785c401dc7b21c4c3a83d46f51581bb349777b1a0442734d03cfb01
-
SSDEEP
6144:DVfjmNS26XDpvPoYMT/DTqjgMSKfLJ7olgtlhns:Z7+yXDBAZzP/w24lhns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df3645092c2ec6646749347b5274bdc8028ede89c0f89fbbbc04b0c3f7e15213
Files
-
df3645092c2ec6646749347b5274bdc8028ede89c0f89fbbbc04b0c3f7e15213.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE