Static task
static1
Behavioral task
behavioral1
Sample
daf6c61e89f686daf6901eb20fa1089db252d5499f986ca96a5ca9ad901d175c.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
daf6c61e89f686daf6901eb20fa1089db252d5499f986ca96a5ca9ad901d175c.exe
Resource
win10v2004-20231025-en
General
-
Target
daf6c61e89f686daf6901eb20fa1089db252d5499f986ca96a5ca9ad901d175c
-
Size
755KB
-
MD5
37b2c847fb9a4dc90ab2444c21b92498
-
SHA1
940450b084986ab71b90d739e8c6c12fb0edb14b
-
SHA256
daf6c61e89f686daf6901eb20fa1089db252d5499f986ca96a5ca9ad901d175c
-
SHA512
5418a53d69bdaef365eb922bc524da497167889331e000e3c2cd454530863b060b7dacff5bf5a779beb875ee62f58b44c58a374efd45993c260f980952214af7
-
SSDEEP
12288:/OPxjzlPYLD+V2fE5jPwyWSFx5k9bul6bsAmNXrjzh7riwLk/sQZadJt:I/SD+sfE5jPwpgmZWcSXvlB+NI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf6c61e89f686daf6901eb20fa1089db252d5499f986ca96a5ca9ad901d175c
Files
-
daf6c61e89f686daf6901eb20fa1089db252d5499f986ca96a5ca9ad901d175c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 649KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE