Static task
static1
Behavioral task
behavioral1
Sample
ab00ee005983cce80f8d29fe42fb7eb2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab00ee005983cce80f8d29fe42fb7eb2.exe
Resource
win10v2004-20240226-en
General
-
Target
ab00ee005983cce80f8d29fe42fb7eb2
-
Size
13KB
-
MD5
ab00ee005983cce80f8d29fe42fb7eb2
-
SHA1
2d95311c7cfa0a6c34bf5c8a0ece54e9cdc151c9
-
SHA256
98c4c83d28e5fc8cc96773305cba07ebf4fa7c775d86e172e108855da78977c5
-
SHA512
667cd7fc4ae409e5d70a52f391bb307cd121a7d5d88189d80607dc7715ade46dffcca5f8825e6ca11a73efbbb5b1ae01204e55a9a6bda3c8975c2996215b1926
-
SSDEEP
192:5mmUGbN1u10u6W3l0vdV+U2jZRikQq+msuuwIwhNVAfSKwvKTz:0mHb2022vDp2jZV2m8ShfASKTz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab00ee005983cce80f8d29fe42fb7eb2
Files
-
ab00ee005983cce80f8d29fe42fb7eb2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
+Qcu0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+Qcu1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+Qcu2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE