Static task
static1
Behavioral task
behavioral1
Sample
dfeb52a26a5d3cb5532d2dc2382ba3a0832617a7272020167ad000b5e5776925.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
dfeb52a26a5d3cb5532d2dc2382ba3a0832617a7272020167ad000b5e5776925.exe
Resource
win10v2004-20240226-en
General
-
Target
dfeb52a26a5d3cb5532d2dc2382ba3a0832617a7272020167ad000b5e5776925
-
Size
72KB
-
MD5
24bd8ea554c6ac31011801ba9c70aa79
-
SHA1
911a0e38a6bc44cc04d8c4d5fcbe4a23bbd99cb3
-
SHA256
dfeb52a26a5d3cb5532d2dc2382ba3a0832617a7272020167ad000b5e5776925
-
SHA512
2a663cc138f2fef9141f6c1ea6ae2eed04353da387f08739723859bddf8ffcc5743cb71d23499a0bf8a07e30f9bc8fa2ae30cb53870c5475277c3e2a8aa67777
-
SSDEEP
768:HmoFuttN0HWTOikx44KHPa87WbWn/R0UVPvvvvvvZdHrEBaW/1XK/1H580U9UiEc:GoFuttN0HFyviOfAZ1gcPgUN3QivEtA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfeb52a26a5d3cb5532d2dc2382ba3a0832617a7272020167ad000b5e5776925
Files
-
dfeb52a26a5d3cb5532d2dc2382ba3a0832617a7272020167ad000b5e5776925.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ