Static task
static1
Behavioral task
behavioral1
Sample
1df797cb7632d1434c5130dc6b48abdc4fe76d74c7781f4ccc006e62e4764dc0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1df797cb7632d1434c5130dc6b48abdc4fe76d74c7781f4ccc006e62e4764dc0.exe
Resource
win10v2004-20231023-en
General
-
Target
1df797cb7632d1434c5130dc6b48abdc4fe76d74c7781f4ccc006e62e4764dc0
-
Size
220KB
-
MD5
df2eba3ad9824de5f3cecd40d4fcdb08
-
SHA1
55e1e5b9dd66936a64f23e2f5ba99d6be8d9ef28
-
SHA256
1df797cb7632d1434c5130dc6b48abdc4fe76d74c7781f4ccc006e62e4764dc0
-
SHA512
b3958925ba52b0ccda8f18f0667643a6ba57f37c000c16285dd5dd4cd07e6660431a9f2d3a841955c0ffce5ccfd653d0839709c16bbbc40c3d89c3b5fcc91f02
-
SSDEEP
3072:ImhFzZndLRf1jQvTaW418baRYX2NCIHIxCLYjOVwP6xUBJmhFzZndLRf1jQvTaW8:g/n/RBGlHfh6RwMvu7w4b60Dga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1df797cb7632d1434c5130dc6b48abdc4fe76d74c7781f4ccc006e62e4764dc0
Files
-
1df797cb7632d1434c5130dc6b48abdc4fe76d74c7781f4ccc006e62e4764dc0.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ