Static task
static1
Behavioral task
behavioral1
Sample
2025-04-01_943a107b88f85fd88198a9df2e1dc0dd_darkside.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-04-01_943a107b88f85fd88198a9df2e1dc0dd_darkside
-
Size
59KB
-
MD5
943a107b88f85fd88198a9df2e1dc0dd
-
SHA1
bfcf6050ddba6053b738e0c5e54b105880a3c45a
-
SHA256
80c75581d6e09643a8fc7d7e0fa677e95faa64f20141cf493371ea604f6a07c9
-
SHA512
bb179e1deb929502a63d37a19f34808329cb0a5f85618aafcc1eb22ecd91966f12c0033c36a84d966c84dfa86172b0af352e10a086f337f404af34256caacf77
-
SSDEEP
768:GjjmbIax7F3DS4/S9+CuUSbVAdNcxGV1ylvD7Y23W58:Dx7Fu4/ihrhDTV1ylbcZ58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-01_943a107b88f85fd88198a9df2e1dc0dd_darkside
Files
-
2025-04-01_943a107b88f85fd88198a9df2e1dc0dd_darkside.exe windows:5 windows x86 arch:x86
17a4bd9c95f2898add97f309fc6f9bcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 374B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ