Static task
static1
Behavioral task
behavioral1
Sample
df4bf76d9210126f1a929e33cbb1ace2cafe2994d17436f61b394db944592e48.exe
Resource
win7-20240221-en
General
-
Target
df4bf76d9210126f1a929e33cbb1ace2cafe2994d17436f61b394db944592e48
-
Size
5.7MB
-
MD5
1cb31f91ece71e6210c8007f8717c763
-
SHA1
2f8d09631f950d7f05ad94f1f1305c2f68f23949
-
SHA256
df4bf76d9210126f1a929e33cbb1ace2cafe2994d17436f61b394db944592e48
-
SHA512
99c8aa64ed36ba440edf0e54fbbfbee0b7b840f0dc0ff5889f316a343df38023e67a3892c135d34aa6c5b8821f6d72257da5a1200ef3d3c7a33703dfc74088f7
-
SSDEEP
49152:mBIPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:mMKUgTH2M2m9UMpu1QfLczqssnKSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource df4bf76d9210126f1a929e33cbb1ace2cafe2994d17436f61b394db944592e48
Files
-
df4bf76d9210126f1a929e33cbb1ace2cafe2994d17436f61b394db944592e48.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE