Static task
static1
Behavioral task
behavioral1
Sample
def9c953d890a13ad2bbee642ff2aa1794dbddb2df0663cae873115116144d24.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
def9c953d890a13ad2bbee642ff2aa1794dbddb2df0663cae873115116144d24.exe
Resource
win10v2004-20240802-en
General
-
Target
def9c953d890a13ad2bbee642ff2aa1794dbddb2df0663cae873115116144d24.exe
-
Size
2.8MB
-
MD5
4fe072b888cd64ff01d73d8b80bfcf3e
-
SHA1
d13cbf11d9ce3c8271a04c46aea473b0d469fdb1
-
SHA256
def9c953d890a13ad2bbee642ff2aa1794dbddb2df0663cae873115116144d24
-
SHA512
566b28c08625a1a9149a34b6176dce22d5da2830c1df89f390bc8eeb062cb79694b73a486b7bab7fb6d18c80efc73eb4a3e8976fdec6695d1072cd4999fc0a2b
-
SSDEEP
49152:L3odaJHGVBGlKwJJWjTC6E2SEB98SldUzXhkHnsQDhuqqXWJOPp9X+qCko:7Dpzwkd6AEL3l4RUTqXWJOPp9uq2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def9c953d890a13ad2bbee642ff2aa1794dbddb2df0663cae873115116144d24.exe
Files
-
def9c953d890a13ad2bbee642ff2aa1794dbddb2df0663cae873115116144d24.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ