Static task
static1
Behavioral task
behavioral1
Sample
daf5c19be9909820ccd7b0234f1c109f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
daf5c19be9909820ccd7b0234f1c109f.exe
Resource
win10v2004-20231215-en
General
-
Target
daf5c19be9909820ccd7b0234f1c109f
-
Size
6.1MB
-
MD5
daf5c19be9909820ccd7b0234f1c109f
-
SHA1
4d90723970487d303cb0d733c2c70df0340bb94a
-
SHA256
4200a81c5430b0ab6eef9549ec8e14e986501e24d2fe88579aa60a0f04905eee
-
SHA512
429cf36ff017e3e0255de37affd9de38b8c1747cbdb330784f7cfd8f18cf19c3f5d640bb990f88faf9a7c0d08d998dfe4fd32ac61f730f2f888133e9b1fe045d
-
SSDEEP
98304:S8ZYbWBV8PWbVx4Wz82MSq3kI9RVpObMcTpdbu/jVkFMSoRfmtbWRy2KvRO9L0Ex:pV8PWfZzCSq3j7jcTfyaYiE0n8M6ah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf5c19be9909820ccd7b0234f1c109f
Files
-
daf5c19be9909820ccd7b0234f1c109f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Ybaa Size: - Virtual size: 920KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RqZs Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE