Static task
static1
Behavioral task
behavioral1
Sample
7dfd585da8e8f5dd48d3ae933969fb3c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7dfd585da8e8f5dd48d3ae933969fb3c.exe
Resource
win10v2004-20231222-en
General
-
Target
7dfd585da8e8f5dd48d3ae933969fb3c
-
Size
277KB
-
MD5
7dfd585da8e8f5dd48d3ae933969fb3c
-
SHA1
3ca828f7f0b044196767794a3e2c6c378430a923
-
SHA256
6351a0797648f682e7099747d54607dd0691b5938d638cc33651bd6b58c0db5a
-
SHA512
e4902f317093c60b96a363b5557fcce3dea7c47d138ef6510cb04b651c50811fc026b0438f3fc3656c561fe54a69bdd02a3aa62d721a9c17324882f9df104bcb
-
SSDEEP
3072:B0eBKrwf6xf8sFvLs1tB62ttGaRBWBNU6ITK:pHfAo/BJ/Ga3WBNU6ITK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dfd585da8e8f5dd48d3ae933969fb3c
Files
-
7dfd585da8e8f5dd48d3ae933969fb3c.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ