Static task
static1
Behavioral task
behavioral1
Sample
df98866c052d0bcfd65f66d5ecece935.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
df98866c052d0bcfd65f66d5ecece935.exe
Resource
win10v2004-20231215-en
General
-
Target
df98866c052d0bcfd65f66d5ecece935
-
Size
164KB
-
MD5
df98866c052d0bcfd65f66d5ecece935
-
SHA1
c30c54a8ccdf87daf37cf4a2dfbeaa92cd71e42c
-
SHA256
35c68c3a80280623cfe26a445019a526f4af6acacb4768c93a5ed1a8ac211e79
-
SHA512
ebc1061e04b4b6a9fc2ccb5232f1231e1f9eb8a952b34bc8874a86992fb243d0d4b9d20d85e7484e93e284747bd5ec51644762d63297d045ffcd5cc5241b6ac5
-
SSDEEP
3072:oPzjbrY1fg00RQUXDppfHduca+kChFzRJYZMZUYXWAeRRFU8:ovbcg3zppfHduca+DYuZUYXWAox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df98866c052d0bcfd65f66d5ecece935
Files
-
df98866c052d0bcfd65f66d5ecece935.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ