Static task
static1
Behavioral task
behavioral1
Sample
db855b363e11c4bf47e3af9ae6f8f320N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
db855b363e11c4bf47e3af9ae6f8f320N.exe
Resource
win10v2004-20240709-en
General
-
Target
db855b363e11c4bf47e3af9ae6f8f320N.exe
-
Size
1.1MB
-
MD5
db855b363e11c4bf47e3af9ae6f8f320
-
SHA1
2d2aa7989cc088f5e06274f47fab8d7cdf5dce4d
-
SHA256
d0d195d5697864a8c185fc32683715045afed3dcddab1c2a34063950733909f4
-
SHA512
04d1e7a0996dcbff4258ef969c529160fd9fa2effdcd1b23d040ed1e995b96f5313d5810d5b4791fe0e09218924b9a6baa520295f9cf90372f7594df07ce2bf1
-
SSDEEP
12:eH1GSG465M6akP1AZX1R9/EcGvG5V0iCPAYKLORIBORLc:eH1GSAM63EX1R9/EbvG56fPVKPBJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db855b363e11c4bf47e3af9ae6f8f320N.exe
Files
-
db855b363e11c4bf47e3af9ae6f8f320N.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE