crypto_frame.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.exe
Resource
win7-20240419-en
General
-
Target
2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.exe
-
Size
3.9MB
-
MD5
6604a47d10c94c942dec1fca54d3eb05
-
SHA1
5ffd9c0ee6ea01f71cfa64c26afe11f2f375d14b
-
SHA256
2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f
-
SHA512
b3f7c3196ea46364f39ca83d0082b658b2d05d33b6f3b2bd1265a1259ad1e4d560f3ef44887696a1689cebf3c32b69ac401b8b652f0f556aeeaba49eb132924f
-
SSDEEP
98304:7uMhd86B7UgpBClmo+V/kjIynMqaSGd2bZ1Sz:7u/6p3Clmou/S7ngtR
Malware Config
Signatures
-
Detects executables packed with Dotfuscator 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_Dotfuscator -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.exe
Files
-
2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ