Static task
static1
Behavioral task
behavioral1
Sample
dfa64dc7ba3712eec6272c7284549f3f5f7f280eb45f33f2d943e189e7cdd056.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfa64dc7ba3712eec6272c7284549f3f5f7f280eb45f33f2d943e189e7cdd056.exe
Resource
win10v2004-20240226-en
General
-
Target
dfa64dc7ba3712eec6272c7284549f3f5f7f280eb45f33f2d943e189e7cdd056.exe
-
Size
1005KB
-
MD5
362f334df96de91f3bc1804514111a11
-
SHA1
b6cb9298287887ba02b99fe16da4f4956ce29658
-
SHA256
dfa64dc7ba3712eec6272c7284549f3f5f7f280eb45f33f2d943e189e7cdd056
-
SHA512
18c279c8dc1a7f05f71cba73427a0bf240a9f5dad63b636fbac8a02aef88685ff1d51bf3f349320277a421a3537068488068582c1e5d2b60f3f9b99353a18918
-
SSDEEP
24576:Tdnt4t3pfCejOh92+K0n3oFDQMibhNU08FDUvS:T0nj6l73olShSFDUa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa64dc7ba3712eec6272c7284549f3f5f7f280eb45f33f2d943e189e7cdd056.exe
Files
-
dfa64dc7ba3712eec6272c7284549f3f5f7f280eb45f33f2d943e189e7cdd056.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ