Static task
static1
Behavioral task
behavioral1
Sample
Dmbox.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Dmbox.exe
Resource
win10v2004-20231023-en
General
-
Target
Dmbox.exe.1
-
Size
5KB
-
MD5
ecadbdbaabbe31449e2a177bac2475c3
-
SHA1
f54ea29496d785625146eefeb568362d3c0fe435
-
SHA256
08afff15135e82e3fecc735e6a24ad7145ac6b24872487923d149251ed43096d
-
SHA512
0c581727930a6b2600f47f8c55799fb12017684ca4c05462ca0e4e2d831ed2e5578e89a4476ca68c7c94403871d9fa4b5c618052fb2235797f766bb094dd32e8
-
SSDEEP
96:VK26pjU3arLlTxH0lMtaKEPwyY6wrakzNt:VMpjU3afpuEEP7Y6weO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Dmbox.exe.1
Files
-
Dmbox.exe.1.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ