Static task
static1
Behavioral task
behavioral1
Sample
dfb830e4959d3edce849612860080de32db3afda8e835eef7b6f0902e4ec0f69.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dfb830e4959d3edce849612860080de32db3afda8e835eef7b6f0902e4ec0f69.exe
Resource
win10v2004-20230915-en
General
-
Target
dfb830e4959d3edce849612860080de32db3afda8e835eef7b6f0902e4ec0f69
-
Size
3.1MB
-
MD5
a62654800b776551788baf485b494b61
-
SHA1
913fc6bd5edef6f4e42e1585f5e81683c771ab28
-
SHA256
dfb830e4959d3edce849612860080de32db3afda8e835eef7b6f0902e4ec0f69
-
SHA512
24ae28fd5b794696895c94e7c2e3466bdfa09a3f1c2167394c2bf0a0cdf953df30b8bd6e3dc63e3df953ea9e05427bdf5b572ebed4254ca35840a6132704176f
-
SSDEEP
49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlIGhSA3d25fzXH1V5B3qk1:Q+8X9G3vP3AMuGhSUAXHPbv1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfb830e4959d3edce849612860080de32db3afda8e835eef7b6f0902e4ec0f69
Files
-
dfb830e4959d3edce849612860080de32db3afda8e835eef7b6f0902e4ec0f69.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ