Static task
static1
Behavioral task
behavioral1
Sample
db9c3165959ea7e80ef8eab11e8f51a0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
db9c3165959ea7e80ef8eab11e8f51a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
db9c3165959ea7e80ef8eab11e8f51a0N.exe
-
Size
472KB
-
MD5
db9c3165959ea7e80ef8eab11e8f51a0
-
SHA1
7c3b91f30f3577b3570a09c470652566067bea23
-
SHA256
6b6101df6a26bbb37705bd94a8dfcc2f74911e4368a95c838126c97f181e85b1
-
SHA512
df58c09e6730ded3abba9e681e76fcaea29fadb0d187ec3a87e66e2319fead0cfa4e997b3d0cdafce68b9c67067871ad982150389ffd284ceb187371c6529d11
-
SSDEEP
3072:u8RinudiP52xx67lLdniHDo74O/3wFR/BuIg1YCVjdEA6:jkgiPA6RtPkO/AFxBuIO9a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db9c3165959ea7e80ef8eab11e8f51a0N.exe
Files
-
db9c3165959ea7e80ef8eab11e8f51a0N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ