Static task
static1
Behavioral task
behavioral1
Sample
debda2cba769baa17c4761416e92f4da6a715f8dbdfc54f20b8c1cc6a55eaeea.exe
Resource
win7-20230831-en
General
-
Target
debda2cba769baa17c4761416e92f4da6a715f8dbdfc54f20b8c1cc6a55eaeea
-
Size
464KB
-
MD5
a7797b8f601ff0f18844e971e04aed4d
-
SHA1
881c494c168adb101a5f4b03079347dc50a63603
-
SHA256
debda2cba769baa17c4761416e92f4da6a715f8dbdfc54f20b8c1cc6a55eaeea
-
SHA512
6a9a293946efb7671daf237c1c97e49a5304f6f3aabd1014003cbc1deb0d2a3ef30f504ea5e6dd767d06df41a750f89aca7e1ab9a0680c455d53536e78634429
-
SSDEEP
12288:nZanEJrKseec3sthyUcvlcL9RjYVInt3LarP:nZHFvPtPctch9Ym1LE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debda2cba769baa17c4761416e92f4da6a715f8dbdfc54f20b8c1cc6a55eaeea
Files
-
debda2cba769baa17c4761416e92f4da6a715f8dbdfc54f20b8c1cc6a55eaeea.exe windows:4 windows x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.BJFnt Size: 238KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 175KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 18KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE