Static task
static1
Behavioral task
behavioral1
Sample
ab0b9904ab6218c5c49d0639dcd54585.exe
Resource
win7-20231215-en
General
-
Target
ab0b9904ab6218c5c49d0639dcd54585
-
Size
49KB
-
MD5
ab0b9904ab6218c5c49d0639dcd54585
-
SHA1
9246cb3847859400814ecd2fc5d47c9d4f9345d8
-
SHA256
3f8bef4962b4e848e02940eb2b24fa1b719aa177be2045b4beb660cfaad4f9f0
-
SHA512
2cfe98fc34b50d0f2042fa14a81ed1d92f89c858afb7c550f47af0caf146bfd53a8420b6cae25b0390f91ee60f0df90fc654020502b051ed5c053adf0558c324
-
SSDEEP
1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnU:It7R8fU6n8U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab0b9904ab6218c5c49d0639dcd54585
Files
-
ab0b9904ab6218c5c49d0639dcd54585.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
UIJDHTEY Size: - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UIJDHTEY Size: 47KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE