Static task
static1
Behavioral task
behavioral1
Sample
db59defe05bb5d253eb0ea43305b2cd0d2fa399f0a89f99df8dc5d0f9322c86f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
db59defe05bb5d253eb0ea43305b2cd0d2fa399f0a89f99df8dc5d0f9322c86f.exe
Resource
win10v2004-20240508-en
General
-
Target
db59defe05bb5d253eb0ea43305b2cd0d2fa399f0a89f99df8dc5d0f9322c86f
-
Size
80KB
-
MD5
2c5e2c2e66223b7b0d6fcff2cb5f3cda
-
SHA1
710cf6d50e2f37371a55fb636bc30351d3a57a2c
-
SHA256
db59defe05bb5d253eb0ea43305b2cd0d2fa399f0a89f99df8dc5d0f9322c86f
-
SHA512
f7d2b387d57cb9a33d20873043656ae2131ffb8786add4162ca1752182611b88900ac9ec4c39709cc75d3dea30db18490e183f85c92ef023756e8c4fd2e9e293
-
SSDEEP
768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOTl:RshfSWHHNvoLqNwDDGw02eQmh0HjWOTl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db59defe05bb5d253eb0ea43305b2cd0d2fa399f0a89f99df8dc5d0f9322c86f
Files
-
db59defe05bb5d253eb0ea43305b2cd0d2fa399f0a89f99df8dc5d0f9322c86f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE