Static task
static1
Behavioral task
behavioral1
Sample
debaebed07262371c0c695bb53aef693.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
debaebed07262371c0c695bb53aef693.exe
Resource
win10v2004-20231215-en
General
-
Target
debaebed07262371c0c695bb53aef693
-
Size
299KB
-
MD5
debaebed07262371c0c695bb53aef693
-
SHA1
24fe22a0ee5f8a27a9ec3cee7b8ab3ee3274793e
-
SHA256
dd39d7099607b1c3f172516f6a36b3496db2bd6d315ac1738815b598c109d6ee
-
SHA512
0d20deff1d6ba0f656da4028e88a7a215493b04e5948d22a9236beef5df88c243aab61916941522f578cad041a0cf3e7d422e32b82ffd1a4f95caf768bff1d87
-
SSDEEP
6144:o44LrUCS8pFb5h7A2tS7FH1IKF9tOWz3K01Jx6VPS:0LPFbH7I7xROWzaEKS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debaebed07262371c0c695bb53aef693
Files
-
debaebed07262371c0c695bb53aef693.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 269KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE