Static task
static1
Behavioral task
behavioral1
Sample
dfcf3622ebdbebc06823707e001b5f0340f6a03672ed116ccee40f83677b3364.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dfcf3622ebdbebc06823707e001b5f0340f6a03672ed116ccee40f83677b3364.exe
Resource
win10v2004-20240802-en
General
-
Target
dfcf3622ebdbebc06823707e001b5f0340f6a03672ed116ccee40f83677b3364
-
Size
111KB
-
MD5
e9600b3f2ceb1b33651a93ddc79b05cd
-
SHA1
30a6b63598cd3853e1e626807eda431f1332d269
-
SHA256
dfcf3622ebdbebc06823707e001b5f0340f6a03672ed116ccee40f83677b3364
-
SHA512
29d4f7f2dc131fe130966286b3e0d31ee52adb8e6d9cad120f6925a4112163f5e16c2f5fa8a6845092ab84f8d556b0be280d8b993b8a89d8302778f8ab29aa85
-
SSDEEP
3072:bzqe1CH/AWMFxWhRNeHE9pui6yYPaI7Dehib:b/1CffIxWbQmpui6yYPaIGcb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfcf3622ebdbebc06823707e001b5f0340f6a03672ed116ccee40f83677b3364
Files
-
dfcf3622ebdbebc06823707e001b5f0340f6a03672ed116ccee40f83677b3364.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ