Static task
static1
Behavioral task
behavioral1
Sample
7ab3d9ce1197b4c71220bc7c76e2fec3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ab3d9ce1197b4c71220bc7c76e2fec3.exe
Resource
win10v2004-20231222-en
General
-
Target
7ab3d9ce1197b4c71220bc7c76e2fec3
-
Size
576KB
-
MD5
7ab3d9ce1197b4c71220bc7c76e2fec3
-
SHA1
5b344b86e70eddabc586f6cee44288698bffb26f
-
SHA256
13f049db9652c96dfbc4cd15f5f3c795971a45f2a52d553a816e5250df30364f
-
SHA512
ae20d806613149826d92d3f91fcadd7070a04e60010c31c2363d86b376aaa41d26ec631a6818852846f591104f10cad52c8b8db1e2bf61bb011b6da9c7b008d7
-
SSDEEP
12288:mCsOHAi6DUleOiIk07bxjTJ9tWARKa1VJPtsLSovD6y8:DsBkRil0BjTJXYgJFdove
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ab3d9ce1197b4c71220bc7c76e2fec3
Files
-
7ab3d9ce1197b4c71220bc7c76e2fec3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
87234878 Size: 456KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE