Static task
static1
Behavioral task
behavioral1
Sample
dbe515d2ec8c735433a8636746aa29d3df42d6928baf2612946e6ddd15cc88bdN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbe515d2ec8c735433a8636746aa29d3df42d6928baf2612946e6ddd15cc88bdN.exe
Resource
win10v2004-20240802-en
General
-
Target
dbe515d2ec8c735433a8636746aa29d3df42d6928baf2612946e6ddd15cc88bdN
-
Size
178KB
-
MD5
fedcfe45f5e3afbcebcbb020ed7e4210
-
SHA1
81b61430d59fc62179d3f6fe7321f827d5bda77f
-
SHA256
dbe515d2ec8c735433a8636746aa29d3df42d6928baf2612946e6ddd15cc88bd
-
SHA512
11c1fd17993f732a113221f451686ec47dd5d11bb78cedb50327da502dcce855ead8f5f3390cc773ba1ebf0feb20a98b33cf8376e60f4b45afdda0726c350e10
-
SSDEEP
3072:41UTiO8sqvij0e/cWcVhXHB78VrScjwPyj9+SuKUCg4yARSiyuxoA+3kbOcX0qOP:41giOuaAexQhXOVLwPy5NXUuyARS50ol
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbe515d2ec8c735433a8636746aa29d3df42d6928baf2612946e6ddd15cc88bdN
Files
-
dbe515d2ec8c735433a8636746aa29d3df42d6928baf2612946e6ddd15cc88bdN.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE