Static task
static1
Behavioral task
behavioral1
Sample
db893f6ba50aed764dd8198105ae15e0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
db893f6ba50aed764dd8198105ae15e0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
db893f6ba50aed764dd8198105ae15e0_exe32.exe
-
Size
14KB
-
MD5
db893f6ba50aed764dd8198105ae15e0
-
SHA1
5bdb5609072f30105825e13312d77bb4f78d2814
-
SHA256
79f0b87263d26e824af93a4930b6389b6498c4f0c7eb70e864812f960309897e
-
SHA512
6ce16fbd113d6973da6a1fb04eafd8c6753eed8747f048ddca96c82e70ad6e852698cac2b9d59a998be42b40928862237d09ef45771b969ca625a49da59d6776
-
SSDEEP
192:AoMQ5mkSDvmiCQwQcagi9i9YaaaaaaaaaaaapTmueo+RLyqDE045HQ:Fm/C7QFgi9i9ylMRDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db893f6ba50aed764dd8198105ae15e0_exe32.exe
Files
-
db893f6ba50aed764dd8198105ae15e0_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ