Static task
static1
Behavioral task
behavioral1
Sample
ab0e793a74419e052a0e124ba9d7860117d19a7f5a628e0f66e5c6b8421cc52a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ab0e793a74419e052a0e124ba9d7860117d19a7f5a628e0f66e5c6b8421cc52a.exe
Resource
win10v2004-20231023-en
General
-
Target
ab0e793a74419e052a0e124ba9d7860117d19a7f5a628e0f66e5c6b8421cc52a.exe
-
Size
1.8MB
-
MD5
1110f02ef9bf5cd8766673cbb7269c9a
-
SHA1
72a442eebaac687fa52f3fa2e8024bdc9881450d
-
SHA256
ab0e793a74419e052a0e124ba9d7860117d19a7f5a628e0f66e5c6b8421cc52a
-
SHA512
229597e5772b00a2dc5313b9db5652f797b3a996c54a4f61269a4301adda966d198a319d5d6f009dc6f308153c3ce3125f9f00e66b721f60f9b41acee07b5c4f
-
SSDEEP
24576:ufwrGID2rJO7LYlRrZtZAGtJF4Aq9U4fBdcjFtCxoZw9l5Qj:qwrRElhZL5DeBdEvCxoZw9l5I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab0e793a74419e052a0e124ba9d7860117d19a7f5a628e0f66e5c6b8421cc52a.exe
Files
-
ab0e793a74419e052a0e124ba9d7860117d19a7f5a628e0f66e5c6b8421cc52a.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ