Static task
static1
Behavioral task
behavioral1
Sample
df970574cdee30ab1e2bbcb9f63cbcf6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
df970574cdee30ab1e2bbcb9f63cbcf6.exe
Resource
win10v2004-20240226-en
General
-
Target
df970574cdee30ab1e2bbcb9f63cbcf6
-
Size
169KB
-
MD5
df970574cdee30ab1e2bbcb9f63cbcf6
-
SHA1
6b0018d8acc111e4a38676a6ed0905a53e8222c4
-
SHA256
6caff632a8d17ffebc2efa725d95921eb7d2d9b8a8ca2a22b06d4c600991513d
-
SHA512
3f904e050cd799a853bb98131894ed86f034792997c924294bb609c5f6052b12043c3d733f72f91afa006120274878d9c11dcdc412117f046d19f24fcb99cc64
-
SSDEEP
3072:NSocduz1AF5/nyeRDpd5NhfJOunALsr2zIrT9NfsRkEHjZnWJHMGiGVnlueiGRvK:UldCAzfHDpd5/f0u9izInEx1nsrvlriU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df970574cdee30ab1e2bbcb9f63cbcf6
Files
-
df970574cdee30ab1e2bbcb9f63cbcf6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE