Static task
static1
Behavioral task
behavioral1
Sample
ab1c2499b7f0de80c2205f78d978e54e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab1c2499b7f0de80c2205f78d978e54e.exe
Resource
win10v2004-20240226-en
General
-
Target
ab1c2499b7f0de80c2205f78d978e54e
-
Size
463KB
-
MD5
ab1c2499b7f0de80c2205f78d978e54e
-
SHA1
a76009a2b588c6b9c0355e12feed3ee614dee0d8
-
SHA256
759f127d00dbfc1f5399502829dde171c927157c975e02e3b79485a0be40058e
-
SHA512
5c2e5741c3eb0dcede8200d504bd1b01f10e7321e86033baa46ab0d80ddcbae8ff8b1c609f10d835ed70811de1e28b0318f961958e5534a807ab5b6558f32aea
-
SSDEEP
12288:hCFok4IeGIR8MR5RMXOMHz9y2tje/G8SNgc51fu8:hCFoKeGIRCTXmlwgc51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab1c2499b7f0de80c2205f78d978e54e
Files
-
ab1c2499b7f0de80c2205f78d978e54e.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE