Static task
static1
Behavioral task
behavioral1
Sample
df1f931a75bbc72be7ed17d6d2898f0872f866d3e496bdf29c12f0840ff011da.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df1f931a75bbc72be7ed17d6d2898f0872f866d3e496bdf29c12f0840ff011da.exe
Resource
win10v2004-20240412-en
General
-
Target
df1f931a75bbc72be7ed17d6d2898f0872f866d3e496bdf29c12f0840ff011da
-
Size
229KB
-
MD5
ad74d6edc0ee7eacb305aed9714902cf
-
SHA1
7515fb5450423f671ced49022aca2b7eaccd414a
-
SHA256
df1f931a75bbc72be7ed17d6d2898f0872f866d3e496bdf29c12f0840ff011da
-
SHA512
f10d22955adea826c2f6847ec78779360c0af23756d34980d3980c8392dcb384e2efc6e63625f01284ef4dd170c940537df3f6283ba08cffb34a5292ff3cc9bc
-
SSDEEP
6144:+ee/3QDPTCC5271+HZ/pvkym/89bYEwPhCKvav:/bg7AIfFfvav
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df1f931a75bbc72be7ed17d6d2898f0872f866d3e496bdf29c12f0840ff011da
Files
-
df1f931a75bbc72be7ed17d6d2898f0872f866d3e496bdf29c12f0840ff011da.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ