Static task
static1
Behavioral task
behavioral1
Sample
df5faf477169f0f77614240256d32c4e5761e495373813c7df56603c9ba05a9f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df5faf477169f0f77614240256d32c4e5761e495373813c7df56603c9ba05a9f.exe
Resource
win10v2004-20240426-en
General
-
Target
df5faf477169f0f77614240256d32c4e5761e495373813c7df56603c9ba05a9f
-
Size
14KB
-
MD5
adcea01d2dd98b44c55bf3d830fe16c3
-
SHA1
1f0cb36940e2943c2d6eefa32ae47df7229b232a
-
SHA256
df5faf477169f0f77614240256d32c4e5761e495373813c7df56603c9ba05a9f
-
SHA512
27ff67296510d371338642d41c912d41c0103025e4083b7cdef552fb0e49b6ae6a660ebe5e3b0a7366016d873b4e5c09848ca412bf6422d3632d1161bab89338
-
SSDEEP
384:IGULdVvPsNQVDNWb040r6csBFGUVkDE045H2GGGG:mhVvPLDksr6csKFA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df5faf477169f0f77614240256d32c4e5761e495373813c7df56603c9ba05a9f
Files
-
df5faf477169f0f77614240256d32c4e5761e495373813c7df56603c9ba05a9f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ