Static task
static1
Behavioral task
behavioral1
Sample
df113b3c9526a79c9d9d396c37ab163e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
df113b3c9526a79c9d9d396c37ab163e.exe
Resource
win10v2004-20240226-en
General
-
Target
df113b3c9526a79c9d9d396c37ab163e
-
Size
11KB
-
MD5
df113b3c9526a79c9d9d396c37ab163e
-
SHA1
e17748d76fada5dfd9fc6d0ddbf5fc42a75af43d
-
SHA256
26b46978caa1ee1e1f334de5f99047bb2b479e6df3fce42cdff5402b9b2bae13
-
SHA512
e12fa6fb0b34964a2ae5660cee378211e56ced8fcc8ef977e60021cadbbf05b80064f08aaeeaf4dbaff2652db43791760dd51b96929aeaeeb6d6632068da4969
-
SSDEEP
192:OvxJqAPhpeS1ZK4O3CDHp1QyJXzMYu+KYp5U4ubvRxK:IUAPk21QGMn+KYpu4uFQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df113b3c9526a79c9d9d396c37ab163e
Files
-
df113b3c9526a79c9d9d396c37ab163e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
. Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE