Static task
static1
Behavioral task
behavioral1
Sample
dbb66977990374fba9ee73b7f49432271310cdd8a92dd6213afbacaa47674503.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dbb66977990374fba9ee73b7f49432271310cdd8a92dd6213afbacaa47674503.exe
Resource
win10v2004-20240709-en
General
-
Target
dbb66977990374fba9ee73b7f49432271310cdd8a92dd6213afbacaa47674503
-
Size
316KB
-
MD5
c345fbd543c00be17f6959a3e737d2bc
-
SHA1
b148dfab43d7f4a1529852f3b81fa3b3d4c211e3
-
SHA256
dbb66977990374fba9ee73b7f49432271310cdd8a92dd6213afbacaa47674503
-
SHA512
e31ad75a830e0e50991adc520e1414b545e89e286bbdef42bae64a90c87a904349aca5da9a74665abe79970eb2646f902f01b9a5880740062234453d19b49afa
-
SSDEEP
6144:Yi0jeHxmKK84JiCGmuD0VD+14hkj60PKfdTAqmM+40l/j:Yo0nB4CGmcqKShkjYdszM+405
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbb66977990374fba9ee73b7f49432271310cdd8a92dd6213afbacaa47674503
Files
-
dbb66977990374fba9ee73b7f49432271310cdd8a92dd6213afbacaa47674503.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 204B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ