Static task
static1
Behavioral task
behavioral1
Sample
dfe54bb4c6b94aa7442d269370580d1905b0bdfb89c97f51b4d743ca128a24cd.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
dfe54bb4c6b94aa7442d269370580d1905b0bdfb89c97f51b4d743ca128a24cd.exe
Resource
win10v2004-20231023-en
General
-
Target
dfe54bb4c6b94aa7442d269370580d1905b0bdfb89c97f51b4d743ca128a24cd
-
Size
2.8MB
-
MD5
f3f8382ec7135d242c233d4f10c83e61
-
SHA1
8dbcd993acb8db1c507c163595373d02ce9f5f34
-
SHA256
dfe54bb4c6b94aa7442d269370580d1905b0bdfb89c97f51b4d743ca128a24cd
-
SHA512
fc46f5401161e34fba7516efee75e7cea9ef9654c9a70f7efc58eb60889eac1e00dc80355133c2bb4ac33a8a76fee79fa1ef93e0db85775c57832b5d5cec91e5
-
SSDEEP
49152:iH9Jb9A+BBlQ4iKhchx8SdjnB7HpyBMW4wKcZWrTJpvPBNTM2cF3dtaSCrL5:8Jb6U/7YjnNH83dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe54bb4c6b94aa7442d269370580d1905b0bdfb89c97f51b4d743ca128a24cd
Files
-
dfe54bb4c6b94aa7442d269370580d1905b0bdfb89c97f51b4d743ca128a24cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 314KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.0MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 160KB - Virtual size: 160KB
IMAGE_SCN_MEM_READ