Static task
static1
Behavioral task
behavioral1
Sample
db341f3e87380764ac2651d1ae7ffe38a32892b42c2ed44842f1970d057ee36e.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
db341f3e87380764ac2651d1ae7ffe38a32892b42c2ed44842f1970d057ee36e.exe
Resource
win10v2004-20240709-en
General
-
Target
db341f3e87380764ac2651d1ae7ffe38a32892b42c2ed44842f1970d057ee36e
-
Size
4.9MB
-
MD5
207a6db450be79ed594a616d9929d38c
-
SHA1
c8e3df1b38b962ede659bdfabafc08a82fbe8992
-
SHA256
db341f3e87380764ac2651d1ae7ffe38a32892b42c2ed44842f1970d057ee36e
-
SHA512
a41153a4053a68e82064fb80889c14a8f3a59801195e5d2c04b5263d825e4ab8415be4d1c6a98858f02be0218dc82a91eed5e254d6fe7fa51437221421ac45fa
-
SSDEEP
98304:D41Y4kCyZ041zOVpsbCDedfB1OxMVtSgiTqyfOsuBEqauZCvafu/qR:D464kf0S2DqmqKg0qT8uJpR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db341f3e87380764ac2651d1ae7ffe38a32892b42c2ed44842f1970d057ee36e
Files
-
db341f3e87380764ac2651d1ae7ffe38a32892b42c2ed44842f1970d057ee36e.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ