Static task
static1
Behavioral task
behavioral1
Sample
db00e807e0923feba2031cd96b173c90cc4ba78b597602b8c8a74a73629cc6bf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db00e807e0923feba2031cd96b173c90cc4ba78b597602b8c8a74a73629cc6bf.exe
Resource
win10v2004-20240412-en
General
-
Target
db00e807e0923feba2031cd96b173c90cc4ba78b597602b8c8a74a73629cc6bf
-
Size
2.2MB
-
MD5
21922380480d8d5d0e5b8ea3782b3c92
-
SHA1
3b52d51216eb93840cf67644880afd00846ea6ff
-
SHA256
db00e807e0923feba2031cd96b173c90cc4ba78b597602b8c8a74a73629cc6bf
-
SHA512
dddd0e4c210eb2da088dffbe43e2bdf0d2fa1a302f54454f81fd713869d05b817a9d803616b4a4946a9d5fc36e47a535e4ddaa13f345ba55b765e2966ff1b4b2
-
SSDEEP
49152:+7PlsLs7bvf+aZG78d/dZU5+9S7J3BoirpbpcMsEs9qIs:kGC/d+ZFbpZscV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db00e807e0923feba2031cd96b173c90cc4ba78b597602b8c8a74a73629cc6bf
Files
-
db00e807e0923feba2031cd96b173c90cc4ba78b597602b8c8a74a73629cc6bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE