Static task
static1
Behavioral task
behavioral1
Sample
db1768646878bbaafea7f71ba3d41fe57bab1a500ffcbd08841783bfde2047c4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
db1768646878bbaafea7f71ba3d41fe57bab1a500ffcbd08841783bfde2047c4.exe
Resource
win10v2004-20231215-en
General
-
Target
db1768646878bbaafea7f71ba3d41fe57bab1a500ffcbd08841783bfde2047c4
-
Size
1.6MB
-
MD5
e71b426da4ff121311d5101d7d2cfd54
-
SHA1
bec3df954faae325c8e19bb21d63e3c9b32de8c8
-
SHA256
db1768646878bbaafea7f71ba3d41fe57bab1a500ffcbd08841783bfde2047c4
-
SHA512
d8aec9b758374ecbc73cde0ded29fceb404748435cdc5b0bf2ad03f80a56d20a0a1cb56871695160b83b56fd5af3ad8ffe4db056b359668e84746d2915363de2
-
SSDEEP
49152:i417Jr2P72ANdqxUimYU0+lUvdKPuGs87/CtSYRdV:i89aKm+trFKPuJ6aMYXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db1768646878bbaafea7f71ba3d41fe57bab1a500ffcbd08841783bfde2047c4
Files
-
db1768646878bbaafea7f71ba3d41fe57bab1a500ffcbd08841783bfde2047c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 348KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 108KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 338KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 689KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE