Static task
static1
Behavioral task
behavioral1
Sample
ab7765da677e6db86993292da7837a17ada2be761cb5a4fe85013f46d170d32c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ab7765da677e6db86993292da7837a17ada2be761cb5a4fe85013f46d170d32c.exe
Resource
win10v2004-20230915-en
General
-
Target
ab7765da677e6db86993292da7837a17ada2be761cb5a4fe85013f46d170d32c
-
Size
2.8MB
-
MD5
b46374e78630e9a6bd1b0056cb913476
-
SHA1
68d5845faa0185c82f74d70575b5a9f5e92fbdbb
-
SHA256
ab7765da677e6db86993292da7837a17ada2be761cb5a4fe85013f46d170d32c
-
SHA512
079a3071ac03f32632615f9dff8ab8c59cb7734afd3eea863b7c1e447a94c1612d6d6680fb44ea705cb81fbb910461e5e46f8f1006708aa11818053aa110d982
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlSYaqWN33A:c+8X9G3vP3AMczN3w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab7765da677e6db86993292da7837a17ada2be761cb5a4fe85013f46d170d32c
Files
-
ab7765da677e6db86993292da7837a17ada2be761cb5a4fe85013f46d170d32c.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ