Static task
static1
Behavioral task
behavioral1
Sample
dfa3553913784fd3d374d314c2f841e359e8741712464f622589945d78b364e9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dfa3553913784fd3d374d314c2f841e359e8741712464f622589945d78b364e9.exe
Resource
win10v2004-20230915-en
General
-
Target
dfa3553913784fd3d374d314c2f841e359e8741712464f622589945d78b364e9
-
Size
4.2MB
-
MD5
a7c9fabe66dae44f18d26ae09fff2523
-
SHA1
d3ccf32e889cd1d625fc943d94e4f641e076b1ef
-
SHA256
dfa3553913784fd3d374d314c2f841e359e8741712464f622589945d78b364e9
-
SHA512
99b20ada7e90fcf66b017a090a8c1c1a94762373e977a38d89b7ea608980af7e942c52915272f8a99ca7d350f40d841a10d5504f6e22fcd18f078a6a5030f9a9
-
SSDEEP
24576:7tgaIXsHHtNwPGrH9g3aoLaRBRT633APl9Damai0E0Phb3USOkVyc:UUHrwPidgd+/RT83APlKl5jUSOk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa3553913784fd3d374d314c2f841e359e8741712464f622589945d78b364e9
Files
-
dfa3553913784fd3d374d314c2f841e359e8741712464f622589945d78b364e9.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 885KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 495KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 768B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE