Behavioral task
behavioral1
Sample
db669ea473a8928b0f8845435ba4e4742e34d8ccf0fbb53a615eb05f502b1ac0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db669ea473a8928b0f8845435ba4e4742e34d8ccf0fbb53a615eb05f502b1ac0.exe
Resource
win10v2004-20241007-en
General
-
Target
db669ea473a8928b0f8845435ba4e4742e34d8ccf0fbb53a615eb05f502b1ac0.exe
-
Size
40KB
-
MD5
4897838e67300cce303d1c7e2bcfd086
-
SHA1
97e277518a81da33085af991f8ae9bf89bc52016
-
SHA256
db669ea473a8928b0f8845435ba4e4742e34d8ccf0fbb53a615eb05f502b1ac0
-
SHA512
f665fc48912d62c07ae35b515c9250f08b1d341d0177f3e5a59529445ed7ea9790ca2a4b1c97ee13fadaef5dbe462bc703b9bf962f77a0ac01c32451c83a1577
-
SSDEEP
768:5q9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHehu:5qk/Zdic/qjh8w19JDHehu
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db669ea473a8928b0f8845435ba4e4742e34d8ccf0fbb53a615eb05f502b1ac0.exe
Files
-
db669ea473a8928b0f8845435ba4e4742e34d8ccf0fbb53a615eb05f502b1ac0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ