Static task
static1
Behavioral task
behavioral1
Sample
db2aa64f1b8ff00d37ab60fe572c6c95cb470f18d65aff908735be92d3992a9b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db2aa64f1b8ff00d37ab60fe572c6c95cb470f18d65aff908735be92d3992a9b.exe
Resource
win10v2004-20240419-en
General
-
Target
db2aa64f1b8ff00d37ab60fe572c6c95cb470f18d65aff908735be92d3992a9b
-
Size
128KB
-
MD5
368369bd0636f3dbcbb32044cd04c9f5
-
SHA1
269aa581e324cd97238d7245fa1ef0cc5c9d512d
-
SHA256
db2aa64f1b8ff00d37ab60fe572c6c95cb470f18d65aff908735be92d3992a9b
-
SHA512
a5931fa999050184acedbedbe8925af308392e57827da15d58279f71e969ffaf83d2cc7d4eb5df3bde36513720f78d7a3a87ee6ca2a05423b78154e9c9c970d2
-
SSDEEP
3072:BgkduOF/531BlcY6CYem4WkWs6FEYtdZCwGtLItkiXOBSLhoMrdGB8rVl:Bga95FTvT/DX4EYtCwGtMtkiXOoloMrl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db2aa64f1b8ff00d37ab60fe572c6c95cb470f18d65aff908735be92d3992a9b
Files
-
db2aa64f1b8ff00d37ab60fe572c6c95cb470f18d65aff908735be92d3992a9b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ