Static task
static1
Behavioral task
behavioral1
Sample
0aba061f10da31343dfff8bff9b9f8cd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0aba061f10da31343dfff8bff9b9f8cd.exe
Resource
win10v2004-20231215-en
General
-
Target
0aba061f10da31343dfff8bff9b9f8cd
-
Size
614KB
-
MD5
0aba061f10da31343dfff8bff9b9f8cd
-
SHA1
96bd9e35a2e0648538ad759175ae8fab7a0e6659
-
SHA256
c2b214f77888a4d352a3239209d82ee0b88d21e63014b0c3a097c86e3cb9adbf
-
SHA512
b7f397bff134baf7ae69de75ff8819eeb9c1d4f27d8a29a007f9cf84dbe11a66c0e4d2306f6143e9a3232a9084544351a5218e550df96b0e81a71eb8c40a4bf7
-
SSDEEP
6144:NZ7k9QmiBgVzbdTZiVrJXshsQJ/zPIsA9KM+Kulb4ytWpTxvaS18zYbwILkbO:T7kimikzZAtcV/zPE9Kmul0yt+XezWka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aba061f10da31343dfff8bff9b9f8cd
Files
-
0aba061f10da31343dfff8bff9b9f8cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
5z0k0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5z0k1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5z0k2 Size: 42B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE