Behavioral task
behavioral1
Sample
ab4c4028138939bda62c2825332403ed.exe
Resource
win7-20231215-en
General
-
Target
ab4c4028138939bda62c2825332403ed
-
Size
883KB
-
MD5
ab4c4028138939bda62c2825332403ed
-
SHA1
657cb4ad08b6e30b27f3b49949048cd57b2c3f64
-
SHA256
65ddc00f7fe6069b1cc50c37ba375af519af10a7965142ada10c747f26adc36c
-
SHA512
dc28941dfe7d9f237e2602f71d640d33b909a6bef353f7ec4e3fdd5ea13635a34d5c535bb34f2264b28561465be56e339e7af4cd1a7dea041dfd6763c30eec43
-
SSDEEP
12288:vTEYAsROAsrt/uxduo1jB0Y96qgKIfJrOV3RzyJhrYMgJXcSyCDZJWFOiNrLWUYf:vwT7rC6qJVBz8RYrJmnNcNeOXOYwU
Malware Config
Signatures
Files
-
ab4c4028138939bda62c2825332403ed.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter0 Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter1 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ