Static task
static1
Behavioral task
behavioral1
Sample
df8d1551922d53d35cba145184763ddd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
df8d1551922d53d35cba145184763ddd.exe
Resource
win10v2004-20240319-en
General
-
Target
df8d1551922d53d35cba145184763ddd
-
Size
324KB
-
MD5
df8d1551922d53d35cba145184763ddd
-
SHA1
4679419653134ab526f795cdfac6c6ce5625f869
-
SHA256
175460e0b32dbf456ba321e95689f8de5e2c5b29be4be103ab4a6d4d70dea4fb
-
SHA512
5b37b106fd834b09d01cf236d9f2ab8939f31c41fc45f0dafa1437011c27d1c66c68c9ca724cc9c4b442b9711e9a82120309e3985caf2a1de307102abc5c3a03
-
SSDEEP
6144:wiowWvQE2THuvhHZTaVm9AyvYwk9rSFra7VDeCj:xowWYtH43dKyh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df8d1551922d53d35cba145184763ddd
Files
-
df8d1551922d53d35cba145184763ddd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ