Static task
static1
Behavioral task
behavioral1
Sample
5819ff7e1fa65b5d70c33dffcf4b3bbf70a545d0ae0771803a83dd889d4d924c.exe
Resource
win7-20240221-en
General
-
Target
5819ff7e1fa65b5d70c33dffcf4b3bbf70a545d0ae0771803a83dd889d4d924c
-
Size
728KB
-
MD5
48901c638f96efbc34f2a2645f90873f
-
SHA1
d395db4a733c3247c9d409ecd64ef0069c38f6c9
-
SHA256
5819ff7e1fa65b5d70c33dffcf4b3bbf70a545d0ae0771803a83dd889d4d924c
-
SHA512
f636a597606f62e807ae1636d017e3bc45595b0e52e5d987f5478772cefdb6e7f8eca38a41bf10a86231972ef92d45d6b6658191342479539c745b0826bf5be7
-
SSDEEP
6144:PBQ9FgDZoQ4en4UgkP/Hzo9mfXOXD7ID3omUtu1omUt8AVSlfQDL:PBx7bgkHWT7I7omT1omoVSli
Malware Config
Signatures
-
Detects executables packed with Dotfuscator 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_Dotfuscator -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5819ff7e1fa65b5d70c33dffcf4b3bbf70a545d0ae0771803a83dd889d4d924c
Files
-
5819ff7e1fa65b5d70c33dffcf4b3bbf70a545d0ae0771803a83dd889d4d924c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 719KB - Virtual size: 718KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ