Behavioral task
behavioral1
Sample
e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34.exe
Resource
win10v2004-20241007-en
General
-
Target
e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34
-
Size
47KB
-
MD5
c794da55f0366d8e2504c154ef416ed5
-
SHA1
1536e3e92f78854d3184fced6eeb740c7877959b
-
SHA256
e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34
-
SHA512
618dcdd603a0b0ab9b6a56ecff5496f8e77a6fc6f5cf30e571f23fa4a7477cbbe2546a7926fcc4e270bc3755c7a2612d29df19bff0875c187586101b965d3cd8
-
SSDEEP
768:eEU07c92/EyTAYtxqfGNC0klI7C8yOvi3egdNO74No5rVGIpLh:eg7wc1aGNC0klI7CPN3vxuRLh
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34
Files
-
e4b7e8dcfb394ac30c29d22fd79398f4b34872f4ab31798c06eed57277fecd34.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ