Static task
static1
Behavioral task
behavioral1
Sample
1ab913677f6dd12fffb3840d2cadc1d5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ab913677f6dd12fffb3840d2cadc1d5.exe
Resource
win10v2004-20231215-en
General
-
Target
1ab913677f6dd12fffb3840d2cadc1d5
-
Size
232KB
-
MD5
1ab913677f6dd12fffb3840d2cadc1d5
-
SHA1
3b01d569be8d370b06d58d8a4738e89e8469d021
-
SHA256
120e83b00e2f98287fd245ffcd571ed3db68a158e7ca03d6d45648218612db8a
-
SHA512
a9281758366b975d41b5a0afc4dbaae0a6df2da2c9dbec1f70e35dbee21bddefb845f53d8a252d5b50e4996e5b116799fce4b315bac0a31a2462c3017875be09
-
SSDEEP
6144:6yVWdrZDcOy8ksdSuMUP9sJfA6Amy4+hSrNuHQ:6Z9TksdSuLVsJI6A4+uNuHQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ab913677f6dd12fffb3840d2cadc1d5
Files
-
1ab913677f6dd12fffb3840d2cadc1d5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.qnk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE