Static task
static1
Behavioral task
behavioral1
Sample
dmaster.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dmaster.exe
Resource
win10v2004-20230915-en
General
-
Target
dmaster.exe
-
Size
6.0MB
-
MD5
d4204f1728beb31dce043bc935a9b857
-
SHA1
f7a69ca300fdccdf53187c0e8b1e9b7d8286501a
-
SHA256
6f3214baa483fd5fa32509a399de7d4350ae4375c0803129509f9735a255f146
-
SHA512
5f1db7d7a23579369e006415b82260dc57da4535f546af462165bbdbccda98a4f24d197d420f4b3b4591098445decda2e5a3298e3978761e205c6062b8e426a1
-
SSDEEP
98304:VIki2HnhvTgzDg8sDqAnx8xxuc55etUMJirmNPQ:5XBv0zM8sDJKxl5KsrmNPQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dmaster.exe
Files
-
dmaster.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1.2MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 44B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ