Static task
static1
Behavioral task
behavioral1
Sample
da798e428e64b07eb36503652b624bc3dd2c06ce046d003d7fdc858a1ebc13e0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
da798e428e64b07eb36503652b624bc3dd2c06ce046d003d7fdc858a1ebc13e0.exe
Resource
win10v2004-20231023-en
General
-
Target
da798e428e64b07eb36503652b624bc3dd2c06ce046d003d7fdc858a1ebc13e0
-
Size
4.1MB
-
MD5
b37299823217de09a5b168d31ddeae86
-
SHA1
5502af6e9c08ac927c3fbcd1d150a36522458e6c
-
SHA256
da798e428e64b07eb36503652b624bc3dd2c06ce046d003d7fdc858a1ebc13e0
-
SHA512
e62b41c5e52ce307d0a0d0a54ce0115015c513e023c22324d8ab84e4987cd849fc23b01155bf63fada75d7b60b60ef69c9b8227df94585323c4908d8d729f3ed
-
SSDEEP
49152:v7GZfICio2RCV0sGbGVdylWojqkraXkFyWa+tdTeOWpNBRdL2PbX+tRs2v7cniI9:6C4yGVyvaXkyWa+tMOWLFsQfHdW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da798e428e64b07eb36503652b624bc3dd2c06ce046d003d7fdc858a1ebc13e0
Files
-
da798e428e64b07eb36503652b624bc3dd2c06ce046d003d7fdc858a1ebc13e0.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE