Static task
static1
Behavioral task
behavioral1
Sample
d0a1cfac813c544a4dc18aa72b12e0bf3b866ad7b5a21e8892ae92a1bcf0885e.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
d0a1cfac813c544a4dc18aa72b12e0bf3b866ad7b5a21e8892ae92a1bcf0885e.exe
Resource
win10v2004-20240412-en
General
-
Target
d0a1cfac813c544a4dc18aa72b12e0bf3b866ad7b5a21e8892ae92a1bcf0885e
-
Size
581KB
-
MD5
f8bf4799c28d70960531565f37f0c731
-
SHA1
fd4274514772671f4d3a254d9719eacd2b373853
-
SHA256
d0a1cfac813c544a4dc18aa72b12e0bf3b866ad7b5a21e8892ae92a1bcf0885e
-
SHA512
6f9197ffd1cd4848c57fa90dce530a7a653c42f06f255bf62f19a55420425dbfdf2d5d1ec04db9c8489e8071db34e4f8d8e3f96da54b170ef437abcd4759fc6e
-
SSDEEP
12288:oWBm+95nHfF2mgewF75xmjHBt3agzdn9N4UQChx91kfgjdkAp3B7Yolk:oWBz95ndbgf750jHbJzd9N49Ch8gjTps
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a1cfac813c544a4dc18aa72b12e0bf3b866ad7b5a21e8892ae92a1bcf0885e
Files
-
d0a1cfac813c544a4dc18aa72b12e0bf3b866ad7b5a21e8892ae92a1bcf0885e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
prot Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ