Static task
static1
Behavioral task
behavioral1
Sample
dcaf7dc3c87eac69e3be3944a2c49aeec461d34c168c9b9f246627e8ce998d24.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dcaf7dc3c87eac69e3be3944a2c49aeec461d34c168c9b9f246627e8ce998d24.exe
Resource
win10v2004-20230915-en
General
-
Target
dcaf7dc3c87eac69e3be3944a2c49aeec461d34c168c9b9f246627e8ce998d24
-
Size
2.2MB
-
MD5
c3dcbc53e24bacd7c1059c93a741e4b0
-
SHA1
74cbf16532e52c074cc50223cd7fbc9c8585c5a6
-
SHA256
dcaf7dc3c87eac69e3be3944a2c49aeec461d34c168c9b9f246627e8ce998d24
-
SHA512
9a5834d045bdb959303ed75b9cb5f3952cdb4c1175e0463be53708a4ffa6c8477af532b53c0087e9312c3caf8c94e26c1e718257f03dad335b2ed6b05b1d0c96
-
SSDEEP
49152:sx0eITJvV3uHc+WArAgzQGrhzsPa2wj7mGonmGoJH:deIV3z+YgzQGtAa2wj7UWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcaf7dc3c87eac69e3be3944a2c49aeec461d34c168c9b9f246627e8ce998d24
Files
-
dcaf7dc3c87eac69e3be3944a2c49aeec461d34c168c9b9f246627e8ce998d24.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 652KB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.4MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 300KB - Virtual size: 300KB
IMAGE_SCN_MEM_READ