Static task
static1
Behavioral task
behavioral1
Sample
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe
Resource
win10v2004-20231222-en
General
-
Target
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe
-
Size
107KB
-
MD5
f873b2aae040d6d8f50e493cd5602577
-
SHA1
f88854aa5d57cee0b555a2c730f9222f01feacd2
-
SHA256
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9
-
SHA512
5b8446266bee34f241b8b3211146ea95651b449ea8c57c0fd65f3c1a6a7d7b7534131b34cf86bd191e7acc2b68269685749120eb7a087bbf73246e9df346cd32
-
SSDEEP
3072:Pw5ApHMbC/b14+Olf22thZjFxQny9KfzV:POUHMyf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe
Files
-
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ