Static task
static1
Behavioral task
behavioral1
Sample
df960762877aafeb776d8801a939ab40N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
df960762877aafeb776d8801a939ab40N.exe
Resource
win10v2004-20240802-en
General
-
Target
df960762877aafeb776d8801a939ab40N
-
Size
66KB
-
MD5
df960762877aafeb776d8801a939ab40
-
SHA1
cf93351b12d7334ac0f80bd981c3b248cea585c0
-
SHA256
f84c6b3df15a11586132fcf9d5bf2c69c5438631a88263fbb45c92377ccb6571
-
SHA512
19a95284caca77bcb3ce2ebeb618a1fcb1cc353d1f9b6084aa6b1c35046bf84fecfb01aee59df00d710602a3dd59867464c1e4fd3af4d5bbb477fb5b5f6dd4ce
-
SSDEEP
768:RZCzNyrsbbRImy80EsgoNjoLO3/AuS1+0eCqT4u8J0DJWhjSjAsOmIvrd/bmKQPm:OzUIb25A8ULI00zTto09WhjUAsOfYm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df960762877aafeb776d8801a939ab40N
Files
-
df960762877aafeb776d8801a939ab40N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ