Static task
static1
Behavioral task
behavioral1
Sample
MobileAdminDB.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MobileAdminDB.exe
Resource
win10v2004-20230220-en
General
-
Target
MobileAdminDB.exe
-
Size
6.1MB
-
MD5
da1007ecb473dfc37e657115c5eeee9b
-
SHA1
f026c092c7bcf52b8aba8616aa280a85a1f30876
-
SHA256
11c55ebe71e5fddb35a22933662ac70da14fc2a8c0bb5d157e594ef7267a99b7
-
SHA512
59fd5b25a4090dbf07acd3c70d312532200ded8f1c06a4e39a65688a2c561e80e57708944dde1911175e643f481be419efc421c5f0a4c3e4936494cde182bd6e
-
SSDEEP
49152:vcAgo09g9jyddbb1N0HPgB6QYtwx82D6NRYMI0woy3Kt85WBLmEtvbyAsaozK9yi:vcAgo09RkQYGx8FI0woRsaorDm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MobileAdminDB.exe
Files
-
MobileAdminDB.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ