Static task
static1
Behavioral task
behavioral1
Sample
db5327933f66e121cd36d86d1d97756065ecb2245ca6403b5e5397600c984e3a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db5327933f66e121cd36d86d1d97756065ecb2245ca6403b5e5397600c984e3a.exe
Resource
win10v2004-20240226-en
General
-
Target
db5327933f66e121cd36d86d1d97756065ecb2245ca6403b5e5397600c984e3a
-
Size
14KB
-
MD5
91a5147dc9ac443ef5b26453810dcbe5
-
SHA1
38b46eb7b89c40a81f142e46ec77a321ece8b321
-
SHA256
db5327933f66e121cd36d86d1d97756065ecb2245ca6403b5e5397600c984e3a
-
SHA512
1ede1bc1083ea5b07e4710987244143731b9e1493bac809fb9c2d30f7d730c9f0dfa3fb9f96b6344195562761c6947cd45fa7604e896ca600b5fc7dcef9dd540
-
SSDEEP
384:NJaJYa65JbIO0s2jK0S5iOSDE045HsSSSS:aJJ6TU/jC5itA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db5327933f66e121cd36d86d1d97756065ecb2245ca6403b5e5397600c984e3a
Files
-
db5327933f66e121cd36d86d1d97756065ecb2245ca6403b5e5397600c984e3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ