Static task
static1
Behavioral task
behavioral1
Sample
2ab4f7bbddc750b55f15a704a7266adb.exe
Resource
win7-20231215-en
General
-
Target
2ab4f7bbddc750b55f15a704a7266adb
-
Size
3.4MB
-
MD5
2ab4f7bbddc750b55f15a704a7266adb
-
SHA1
ea1688cbcba7767651647b88ca561f435da2df81
-
SHA256
117481545aefbb254015ceda2a8a7773c430c8d8f472e5ad870b9f4a4e0c9a6c
-
SHA512
7437482738275f6c05aa7b67aa1f83a3d784428e50073df3829a8bca444f1864c357e6884ae3ed5f5eefbed77e652ddb44c8bf515c2c9ec4712d3c54b82b92e6
-
SSDEEP
98304:PRsZKTYQw3LrpAdZSTOGHukS4/RWfNG8wEdVAdsmq:psZSK3K3FGS4eG8wi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ab4f7bbddc750b55f15a704a7266adb
Files
-
2ab4f7bbddc750b55f15a704a7266adb.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 711KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtwvpusl Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zfqwgosc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE