Static task
static1
Behavioral task
behavioral1
Sample
debug.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
debug.exe
Resource
win10v2004-20240412-en
General
-
Target
debug.exe
-
Size
10KB
-
MD5
faba7d1f207bc3dbba9bce7ed8a85970
-
SHA1
e8edce72367ccc71ae99b1f3e05b7cad489a9cce
-
SHA256
87f193b6a66a1879fef03b3013a6da43c3189fcb0eca44ed07f3fd6e744b1194
-
SHA512
c6e96d18f8c3cf8370b614ecdc4a9cbbcf0836e19169422e1ebbd1c91619a2a948df4a9e042abbcf79cb1622132de5c4d6806e6a4fed719c8e91c2b8e0e1e23b
-
SSDEEP
96:0lSpCJZRCv+rGUE+U15zgaKUC2vV8vhAEG0+y74IhdYBZ2vIjc4U4Ay+Gi+vYbEB:0lSUqvHfdK2t6pG0+y7XI2v6/UOi4qI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debug.exe
Files
-
debug.exe.exe windows:4 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvxs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE