Static task
static1
Behavioral task
behavioral1
Sample
cfdf4094e915ac43f3de659c0b7d66c21d9cbd19908e5f7e1d543d91746c3d26.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cfdf4094e915ac43f3de659c0b7d66c21d9cbd19908e5f7e1d543d91746c3d26.exe
Resource
win10v2004-20240802-en
General
-
Target
cfdf4094e915ac43f3de659c0b7d66c21d9cbd19908e5f7e1d543d91746c3d26
-
Size
1.2MB
-
MD5
d007ece54f82cc919f19e3fa79bca385
-
SHA1
367da575c4505596a731999eadcc8ad7d2de7feb
-
SHA256
cfdf4094e915ac43f3de659c0b7d66c21d9cbd19908e5f7e1d543d91746c3d26
-
SHA512
2310afc6c2157d566d8d2d239adf0a6c30703dc8ff72da68ca1316c2012377f122641fe3ae0b59236622734f95aee3d1c418afa4b7eb63e279102235d30d5616
-
SSDEEP
24576:nN1Ln3z42qydLO0QUWFOpvfphqQiSUNsQ+6Ke/dkQ3f+kB+qx:N1Lj42TnQ7F0f3hgGaOQ3WT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfdf4094e915ac43f3de659c0b7d66c21d9cbd19908e5f7e1d543d91746c3d26
Files
-
cfdf4094e915ac43f3de659c0b7d66c21d9cbd19908e5f7e1d543d91746c3d26.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
:D;)( Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ