Static task
static1
Behavioral task
behavioral1
Sample
dafcd84db3bc6965dd6091acdecdd7e8bba9267f290eb977e716466642121462.exe
Resource
win7-20230831-en
General
-
Target
dafcd84db3bc6965dd6091acdecdd7e8bba9267f290eb977e716466642121462
-
Size
2.5MB
-
MD5
d74488593c7c1c65ff6e48845de04d65
-
SHA1
2a3eeb3433647e93e323f1be8ecded9d072fb196
-
SHA256
dafcd84db3bc6965dd6091acdecdd7e8bba9267f290eb977e716466642121462
-
SHA512
b3caf6559c7cbb95ebcdf34b4d678c1cbd5433c738e1b96b992f65384a6f6b23f921b6fc1cc812ad5555158e500ea7ce909a617aec672fe619022cb696958145
-
SSDEEP
49152:wDkYOMwwnMb4PmyVhXlxqCLxqCI+V8tgJd8kuGlb//DJ:dYOXwnS4rVjx1Lx1I+CgaylbDJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dafcd84db3bc6965dd6091acdecdd7e8bba9267f290eb977e716466642121462
Files
-
dafcd84db3bc6965dd6091acdecdd7e8bba9267f290eb977e716466642121462.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 49B - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE