Static task
static1
Behavioral task
behavioral1
Sample
dbec62eab4e26d65f29d8ae341fc899ffffcddbf084152fc4e5e3f2d2c410ec3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
dbec62eab4e26d65f29d8ae341fc899ffffcddbf084152fc4e5e3f2d2c410ec3.exe
Resource
win10v2004-20230703-en
General
-
Target
dbec62eab4e26d65f29d8ae341fc899ffffcddbf084152fc4e5e3f2d2c410ec3
-
Size
2.6MB
-
MD5
342a3ba58623f6994eaea80bd8b48ee2
-
SHA1
0a2c32801d6d710d0582b17fd3e09322e1543540
-
SHA256
dbec62eab4e26d65f29d8ae341fc899ffffcddbf084152fc4e5e3f2d2c410ec3
-
SHA512
dba2440f39bdf02e08d1fed1653ba52898dbfcc6a99a1d22fbc9ccb0e114183306430b532ef622f3eef387fdad2796938084794e2bdbecc4165602e00f31db9d
-
SSDEEP
49152:lzRGjmxHB1Oi61RzBK4nLkDC3lcQpU8K1ZDfnKM5b9qC0VA0XQK1i4GK7:jGjcV61RzBNLkCUCM1qqGQK1i2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbec62eab4e26d65f29d8ae341fc899ffffcddbf084152fc4e5e3f2d2c410ec3
Files
-
dbec62eab4e26d65f29d8ae341fc899ffffcddbf084152fc4e5e3f2d2c410ec3.exe windows x86
6a70829718b2422ce9f3e8a6882ee753
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
FindNextFileA
user32
wsprintfA
SystemParametersInfoA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
gdi32
ScaleWindowExtEx
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wldap32
ord29
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.2MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ