Static task
static1
Behavioral task
behavioral1
Sample
db44e707e44acd97873977cbf40e96db1b3695e2674fb338384ba62f38fd19bf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
db44e707e44acd97873977cbf40e96db1b3695e2674fb338384ba62f38fd19bf.exe
Resource
win10v2004-20240226-en
General
-
Target
db44e707e44acd97873977cbf40e96db1b3695e2674fb338384ba62f38fd19bf
-
Size
828KB
-
MD5
fd8e47b837b0cabc437527611971f5cd
-
SHA1
98e349e25617fe03669c079a19272d782d2b875d
-
SHA256
db44e707e44acd97873977cbf40e96db1b3695e2674fb338384ba62f38fd19bf
-
SHA512
2aadd0c574ab773ed1bdb587d45bed58bf330a0df72c28147dfea542012a5185e06b387a9a085fd45e3619d17fe895a41cbe4014e054be0dc2d10fc71b654485
-
SSDEEP
24576:ZY6NjevRskkgMm+rq/zRg9K3xXXIZ2qLLJ:ZjK+OBFXIHN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db44e707e44acd97873977cbf40e96db1b3695e2674fb338384ba62f38fd19bf
Files
-
db44e707e44acd97873977cbf40e96db1b3695e2674fb338384ba62f38fd19bf.exe windows:4 windows x86 arch:x86
3a8897c84eb41f36b4bbabcc617408b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 64KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ