Static task
static1
Behavioral task
behavioral1
Sample
df3280292de939e2087991f8e4eee666.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
df3280292de939e2087991f8e4eee666.exe
Resource
win10v2004-20240319-en
General
-
Target
df3280292de939e2087991f8e4eee666
-
Size
166KB
-
MD5
df3280292de939e2087991f8e4eee666
-
SHA1
978356d341eb3c1b9ae3e620e30a311e4f5a0bd7
-
SHA256
31580d96bc838db52f2066406f6c7edaa70663c2317b51e227eed9a43268e7fd
-
SHA512
d6a3b76ea35b37cf3719aa47aaf121102cbd6a262a5b235e271793118ef4d98e9afaaf3f37d659f2a67b87bc18ddc5c4e316134a279291019ffdb7010327f86d
-
SSDEEP
3072:mW8jzhZVxrt9BJobjL6K88MU5sEs50PG8mSug4qpjg/7dQiRUO:mPjzhdR9BJobj218MU5Rk0PGnPgj5g/f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df3280292de939e2087991f8e4eee666
Files
-
df3280292de939e2087991f8e4eee666.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 25KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE