Static task
static1
Behavioral task
behavioral1
Sample
dfabcafee27c52207fc06fdb8cccfcce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfabcafee27c52207fc06fdb8cccfcce.exe
Resource
win10v2004-20231215-en
General
-
Target
dfabcafee27c52207fc06fdb8cccfcce
-
Size
64KB
-
MD5
dfabcafee27c52207fc06fdb8cccfcce
-
SHA1
f8c4658b58c71e56c194832ac5c36076c547414a
-
SHA256
2a4b0d75bcdab266d22b373e2792b9607fc6017f59e48a281a3d1caa5dba7d79
-
SHA512
ab88aaa0ebf2c4a19fc330ea736ed4eff5c526aa09371fdabe0b6dafdf5bffcf94eb62e5fcf88976f6d7fb6d0a34fe4d15226b396bde01ea1913aeef5b7688f0
-
SSDEEP
768:hah11BRuobrMPYeN1pp5n5Kgl29kUl46AnItW/GLesXtZDDvzRU:hcPPryNXD5KgoflVAnIwgthvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfabcafee27c52207fc06fdb8cccfcce
Files
-
dfabcafee27c52207fc06fdb8cccfcce.exe windows:4 windows x86 arch:x86
7b22b4409a3e021f3b2c2be4099a99a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlImageNtHeader
strcmp
RtlImageDirectoryEntryToData
_chkstk
memset
kernel32
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
LoadLibraryA
MoveFileExA
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE