Static task
static1
Behavioral task
behavioral1
Sample
dfe1ded3aabe85b3202a17898c94a0eb5a8271cd9eaebda5ca22e8fc2a41d211.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
dfe1ded3aabe85b3202a17898c94a0eb5a8271cd9eaebda5ca22e8fc2a41d211.exe
Resource
win10v2004-20231127-en
General
-
Target
dfe1ded3aabe85b3202a17898c94a0eb5a8271cd9eaebda5ca22e8fc2a41d211
-
Size
16KB
-
MD5
c7629fa5dee5f214e8602df496b47936
-
SHA1
227e5bdbc56e29b8666bd99f9417cb6eed0f84ab
-
SHA256
dfe1ded3aabe85b3202a17898c94a0eb5a8271cd9eaebda5ca22e8fc2a41d211
-
SHA512
37e7c08aca1d0e52923bc21e9719cf83ff790136b1d36d8b3e33647debd628902ef36561c15db0a9d0438897a41bdf9c95f45f1a435b48033f78253fb0c9401a
-
SSDEEP
384:4Sm0VFXsW02FQI0SkeGEkvwKwq6uSDp9aDp9:4tq/ESnbDGDr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe1ded3aabe85b3202a17898c94a0eb5a8271cd9eaebda5ca22e8fc2a41d211
Files
-
dfe1ded3aabe85b3202a17898c94a0eb5a8271cd9eaebda5ca22e8fc2a41d211.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ