Static task
static1
Behavioral task
behavioral1
Sample
db4750a54dfc51d3813471a0d764b49a5a5d06ca878bb085ec205fba1bbb1d6e.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
db4750a54dfc51d3813471a0d764b49a5a5d06ca878bb085ec205fba1bbb1d6e.exe
Resource
win10v2004-20240508-en
General
-
Target
db4750a54dfc51d3813471a0d764b49a5a5d06ca878bb085ec205fba1bbb1d6e
-
Size
641KB
-
MD5
e0bbd968a8736e05cc4a18a3e0b425af
-
SHA1
5cffcc4fc51a96010cf1cd080701344007602f79
-
SHA256
db4750a54dfc51d3813471a0d764b49a5a5d06ca878bb085ec205fba1bbb1d6e
-
SHA512
2616199f518c69a14e46c650f997932b421d6306d0ff861a2fdf97bf7eff6a5f507b3bf52cf1af6ae3e8d38f26f2e9eefeba35df564349afd66351878db45a24
-
SSDEEP
12288:h+3Dn4mBCp+O12t7LVI4F2omhg8pDNZoIfldC/JJNkvM97d17XbawfNDgK6zWa/:h+3Dgp+Iq/VjFjGXoIflUH8M9nSKgZSG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db4750a54dfc51d3813471a0d764b49a5a5d06ca878bb085ec205fba1bbb1d6e
Files
-
db4750a54dfc51d3813471a0d764b49a5a5d06ca878bb085ec205fba1bbb1d6e.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ