Static task
static1
Behavioral task
behavioral1
Sample
ab88782dc6c55b7ad16a2f49215158e57d08f8f040be63f4fe0d0c42fcdd8473.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ab88782dc6c55b7ad16a2f49215158e57d08f8f040be63f4fe0d0c42fcdd8473.exe
Resource
win10v2004-20231215-en
General
-
Target
ab88782dc6c55b7ad16a2f49215158e57d08f8f040be63f4fe0d0c42fcdd8473.exe
-
Size
2.1MB
-
MD5
fd385d3d91fabeea2aad69a220cf5a1b
-
SHA1
46c0db1a152cbfd1a5a3eb7254a9b73b4c0be2ef
-
SHA256
ab88782dc6c55b7ad16a2f49215158e57d08f8f040be63f4fe0d0c42fcdd8473
-
SHA512
150fe4f8b42fe0672255a3800dcfd1cbde0b4e7bb14eefbd0af925f50853e9e8bfce1dd4fbade87bb7918d809b130abcccb07c4cb6c361676158173ef1b8edfb
-
SSDEEP
24576:BgTi13EKoSjKfgRJVUmcDrEsOm2hseEJvaAe8pMiIoEcE9DtrPkSjO2ncforkv7B:D0KX+6WmcDf2h/4a18pMSE9ZLkSjgc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab88782dc6c55b7ad16a2f49215158e57d08f8f040be63f4fe0d0c42fcdd8473.exe
Files
-
ab88782dc6c55b7ad16a2f49215158e57d08f8f040be63f4fe0d0c42fcdd8473.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ