Static task
static1
Behavioral task
behavioral1
Sample
df01c5830c3ac104f700e9b9c0ac3c73.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df01c5830c3ac104f700e9b9c0ac3c73.exe
Resource
win10v2004-20231215-en
General
-
Target
df01c5830c3ac104f700e9b9c0ac3c73
-
Size
1.2MB
-
MD5
df01c5830c3ac104f700e9b9c0ac3c73
-
SHA1
374f2a2763c5b7c29498d1067e2da66b8fb75256
-
SHA256
79af77dc2b347f1415f1e69aa79973c6683c41580d592ea8d0b08d637638e682
-
SHA512
a314fc2ee96e9eba8c894d0f408581a7e03d3757738dfebc10505e30560e591c219989374f18756197a358ca4897d107139e407d6aa00d4e02e70c69e8df7efb
-
SSDEEP
3072:az3t5XSG4aqqvgyhy1QRZaum1HBY2uKVDf:aLJqW341hHZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df01c5830c3ac104f700e9b9c0ac3c73
Files
-
df01c5830c3ac104f700e9b9c0ac3c73.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ