Static task
static1
Behavioral task
behavioral1
Sample
db1e5ac04ae2447da250645d923dca90_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
db1e5ac04ae2447da250645d923dca90_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
db1e5ac04ae2447da250645d923dca90_exe32.exe
-
Size
40KB
-
MD5
db1e5ac04ae2447da250645d923dca90
-
SHA1
0ba0cf4ac6aa6e76aed93d51db39bc025c89c3e6
-
SHA256
c0f57c788520c44a2cbecb4492c6c017af0d1dd97b860de39d62ea8abef9ae1b
-
SHA512
785bc1d9ea81b2b32aecff7ad7459b66cd3980143ca0a79c5ba44d05947d65297e2a09eea7e112de721224092981f6f73bc7a6acbfe933ce8d00a8625acd9b98
-
SSDEEP
192:9mxkgV8slyXdg4JzqXZP7DhMO0LQM+XK5iSO4VWOyzxqDE045HQpToToT5:9kkBNvJWZjlM+XK5iV4DdDE045HuGG5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db1e5ac04ae2447da250645d923dca90_exe32.exe
Files
-
db1e5ac04ae2447da250645d923dca90_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ