Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W64.ABRisk.PVEG-3846.30817.29399.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W64.ABRisk.PVEG-3846.30817.29399.exe
Resource
win10v2004-20231215-en
General
-
Target
SecuriteInfo.com.W64.ABRisk.PVEG-3846.30817.29399.exe
-
Size
81KB
-
MD5
fe45ccd88bbb2f7ca732023bc82dd6cb
-
SHA1
f19072200b8738f476fed7055f1bb5f7454f66d2
-
SHA256
9b4bdeb3487468f7fc305b93fcf2340f2d6008c7981549cdfcfd9ed8f368ea08
-
SHA512
e1c75d0a0512267b2fc9706b0c8067bf631f0259e2adb5c5e360a1e21f68a60bf2371445df21bc7497d7f80da2fbb3cd4e111b5b2d922cd89ba4ddf8ba5adc6c
-
SSDEEP
1536:oqiMY9idl8Mvyr+hlVd5v9V5spw2u4gQRiXa1v:oqK9idl8gyr+hlV73ow2OQRYa1v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W64.ABRisk.PVEG-3846.30817.29399.exe
Files
-
SecuriteInfo.com.W64.ABRisk.PVEG-3846.30817.29399.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ