Static task
static1
Behavioral task
behavioral1
Sample
def0353c672dd5e3efec4f44b2829533cde404f0128c3dc0b76e8a44894e85fc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
def0353c672dd5e3efec4f44b2829533cde404f0128c3dc0b76e8a44894e85fc.exe
Resource
win10v2004-20230915-en
General
-
Target
def0353c672dd5e3efec4f44b2829533cde404f0128c3dc0b76e8a44894e85fc
-
Size
2.8MB
-
MD5
f1b3d25ee62c357afeabdda2257f8374
-
SHA1
9ee2d93dee1178ec68d22630bcde605f4d212af9
-
SHA256
def0353c672dd5e3efec4f44b2829533cde404f0128c3dc0b76e8a44894e85fc
-
SHA512
4483c42e618a05f0430a63e615274a1b9a798023d26902789e501e392c0aece648c03006a9daf44faa3ff1cb00164e92f93cee3cefae13d044e9a617d924bb56
-
SSDEEP
49152:aoL0MSzvcuBGS4Q5hvQpewmBlvr56c+O/8OLQZ4Cow+Kw0LlEp+wF4iBRWUh6PZ+:a7z7B4QYeB156fO/NQutKw6lEZZhh6HE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def0353c672dd5e3efec4f44b2829533cde404f0128c3dc0b76e8a44894e85fc
Files
-
def0353c672dd5e3efec4f44b2829533cde404f0128c3dc0b76e8a44894e85fc.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.3MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ