Static task
static1
Behavioral task
behavioral1
Sample
7ab340f107225c13205600ed3986b25b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ab340f107225c13205600ed3986b25b.exe
Resource
win10v2004-20231222-en
General
-
Target
7ab340f107225c13205600ed3986b25b
-
Size
472KB
-
MD5
7ab340f107225c13205600ed3986b25b
-
SHA1
05b1309638b8badbbdd403a980c3b1239d12c1a1
-
SHA256
4fd2e0c484c4003e8713d997e4499727cbd94440ca3e5cf6c4c2633e0b456dc2
-
SHA512
ec87b4b32e93e204ce692269c9e891ee78889b4fa46bf1828095ac648e006f4d90e2d5cbb94a2e39fc68825b301f9abd0a772dfa653e73dae51ab3e93c346498
-
SSDEEP
12288:F9w3p+gczyhNSvRbBQHR4qz91hI0zSaNsvz+yuWDVId21NaI+E8tyvX+UNzPlSKV:49KzNNz9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7ab340f107225c13205600ed3986b25b
Files
-
7ab340f107225c13205600ed3986b25b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 470KB - Virtual size: 469KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ