Static task
static1
Behavioral task
behavioral1
Sample
demon.x64.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
demon.x64.exe
Resource
win10v2004-20240611-en
General
-
Target
demon.x64.exe
-
Size
100KB
-
MD5
6864cc73259f1730b6cb34fb97801f04
-
SHA1
6adcce467ad0710ac6443953fc9644dab3f02522
-
SHA256
273821c8c928003c480f1a9278608f025ed875e37fd9e84541cded34c98580f7
-
SHA512
d6a3557814d48e12871f246466a2deded52cf5ebb930b153edd8937e6abd3e775d23320a00ef9998d6cc3fb75d5dfb0a532caab248de0bfd8c0e4374abc46657
-
SSDEEP
1536:vkpoalOYktfCM83vihwYgVE/kGE5+Kb+LwoMSJZNR5FO3Xb:+FITtfCM3DgVE/kOXMSJZjPO3Xb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource demon.x64.exe
Files
-
demon.x64.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ