Static task
static1
Behavioral task
behavioral1
Sample
db81a0c4b14e0303ebcb8b5947d303db4db994b0748203c9d43d9e3063635d3b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
db81a0c4b14e0303ebcb8b5947d303db4db994b0748203c9d43d9e3063635d3b.exe
Resource
win10v2004-20240508-en
General
-
Target
db81a0c4b14e0303ebcb8b5947d303db4db994b0748203c9d43d9e3063635d3b
-
Size
384KB
-
MD5
e3abeddfc8a39077b1aeed19a554ff38
-
SHA1
98386fe685e171032815702c8063427c2e298ae8
-
SHA256
db81a0c4b14e0303ebcb8b5947d303db4db994b0748203c9d43d9e3063635d3b
-
SHA512
dbf903a89e13c29af3458fca15fde4462ef77168b96fd4ce246df14eaa83356307a6d42bf02d0d07bb01422244039bf324cf222474fc84b2de7ba7380027def8
-
SSDEEP
6144:LoDJ3OP6/Jh3KWgFrgGpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwY9:sJz/Jh3K9pV6yYPI3cpV6yYPZ0PVdvca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db81a0c4b14e0303ebcb8b5947d303db4db994b0748203c9d43d9e3063635d3b
Files
-
db81a0c4b14e0303ebcb8b5947d303db4db994b0748203c9d43d9e3063635d3b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ