Static task
static1
Behavioral task
behavioral1
Sample
dbef3e7072f38bcf4f06d93a98a92b87b2e8fc9d29924296b88d2c4b260d3e77.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
dbef3e7072f38bcf4f06d93a98a92b87b2e8fc9d29924296b88d2c4b260d3e77.exe
Resource
win10v2004-20240802-en
General
-
Target
dbef3e7072f38bcf4f06d93a98a92b87b2e8fc9d29924296b88d2c4b260d3e77
-
Size
1.9MB
-
MD5
7ff577a0badcb2c097b57f2d16659a04
-
SHA1
82a71f6d37c23cfd06846b959612551838ec8246
-
SHA256
dbef3e7072f38bcf4f06d93a98a92b87b2e8fc9d29924296b88d2c4b260d3e77
-
SHA512
52f7e5dbc6b98c7988a0bbe35e2703aba84c297d49a5d37b5ee28ae12ca99224fa175ad2983a3980b88a83cfc1e783c056c5651b5821f456bd46977733f70b12
-
SSDEEP
49152:+N5zfs7rZ6Lr0zkQzvZf2rlp3qSL/C5MPCMxmRL:+N5ooLrm1vB2rLvP1YRL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbef3e7072f38bcf4f06d93a98a92b87b2e8fc9d29924296b88d2c4b260d3e77
Files
-
dbef3e7072f38bcf4f06d93a98a92b87b2e8fc9d29924296b88d2c4b260d3e77.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wrrvuclf Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdfecibh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE