Static task
static1
Behavioral task
behavioral1
Sample
df9b2f7addf226efb7a38a00db3cf9b8d75cab028aebd2128814dad315d0a427.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
df9b2f7addf226efb7a38a00db3cf9b8d75cab028aebd2128814dad315d0a427.exe
Resource
win10v2004-20230915-en
General
-
Target
df9b2f7addf226efb7a38a00db3cf9b8d75cab028aebd2128814dad315d0a427
-
Size
1.0MB
-
MD5
4d7d5f8d6c34603b129fc207a5be3146
-
SHA1
fc3224e794bc09a69a5a79a57d5be075b344a91d
-
SHA256
df9b2f7addf226efb7a38a00db3cf9b8d75cab028aebd2128814dad315d0a427
-
SHA512
6971901572b5e96757e47becec301d095e34624d834ff567eaa254e3bae66ae196aa9715aa6496f62fe1c5bf7c7c5d47f46703cad0dd745f1a841aa83cf3e710
-
SSDEEP
24576:leWs5e3igH2tt9m5oeg+eWwyK3gV+wySvlsSlWmAMSb+n:le3I3ihuoUtsYT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df9b2f7addf226efb7a38a00db3cf9b8d75cab028aebd2128814dad315d0a427
Files
-
df9b2f7addf226efb7a38a00db3cf9b8d75cab028aebd2128814dad315d0a427.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 461KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.poly Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 176KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE