Static task
static1
Behavioral task
behavioral1
Sample
0ab1c806225c0a96d29a09b913578193.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ab1c806225c0a96d29a09b913578193.exe
Resource
win10v2004-20231215-en
General
-
Target
0ab1c806225c0a96d29a09b913578193
-
Size
82KB
-
MD5
0ab1c806225c0a96d29a09b913578193
-
SHA1
601d876478f84dadfca65b44cc21c7c5ac58701b
-
SHA256
209288e3f385e46e6f43516cf33f567f14a33cac1491b73eeed819540cb7425c
-
SHA512
289e516de29fb833cf649f11d12b2b0695853cf673ea9516993e5cec35fffed50c7bca4f643c01cc6130ca1d5b95cc5ca640a12ba88e46818e4f1627fa5d6e68
-
SSDEEP
1536:rVJYOtaKywHPpn1dM/697k+xwLlURtMPouC5ykIoOaNJ6EYDeL3ZoR:x+uaIBn1Ne+CCH4C5a+N814JoR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ab1c806225c0a96d29a09b913578193
Files
-
0ab1c806225c0a96d29a09b913578193.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ