Static task
static1
Behavioral task
behavioral1
Sample
df93847c480c6b1ce3e8287038a361d5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df93847c480c6b1ce3e8287038a361d5.exe
Resource
win10v2004-20240226-en
General
-
Target
df93847c480c6b1ce3e8287038a361d5
-
Size
123KB
-
MD5
df93847c480c6b1ce3e8287038a361d5
-
SHA1
5bfe240fa3dbbff2afe2d5a18202e07a52233309
-
SHA256
dbe998c40c10db3461dcde0bb94e1b388a38da1c0c16f00525cfa52892290efb
-
SHA512
5c0c1628717d61c05beefcbb8e17b12b3a0daa9de0427b41a84ca1138661cd1abd649547bcca7f43a5857d8c1231a111988ff6b727850f60a9dd953bf58e4aed
-
SSDEEP
3072:abMkQaj9NgMylBGKt4k9HfmdwZTBrtqOvl8aPCMw53:aYh2uBGKtVdIwZTBrt1l8J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df93847c480c6b1ce3e8287038a361d5
Files
-
df93847c480c6b1ce3e8287038a361d5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ