Static task
static1
Behavioral task
behavioral1
Sample
ab13ac9e3b8386b836eb581ee0a2cfdc.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ab13ac9e3b8386b836eb581ee0a2cfdc.exe
Resource
win10v2004-20240226-en
General
-
Target
ab13ac9e3b8386b836eb581ee0a2cfdc
-
Size
39KB
-
MD5
ab13ac9e3b8386b836eb581ee0a2cfdc
-
SHA1
108c3e4ca554051466899d36c2772bf92d9b3fae
-
SHA256
c3c71664fadbcaa9a317f2a5972dfe74f72613c64d12d97916feabb084d9b16d
-
SHA512
d3229590b1fd2cc85681a548a94cf31dfd938d4c60fff3d84af1a2f2b0eb675b02cd9ae132eac7189011ba9e494fc97288e26f0ea44f7b3794eb10fc16de6c34
-
SSDEEP
768:+koBk96+EXQh4oUjW7K3f1zwzvdzVGh0y4fEyfcBLPDtzxOT/aBiFqOA/gXvtw5:+k196+2QhZ37KAUuy3y0BLPe/a3g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab13ac9e3b8386b836eb581ee0a2cfdc
Files
-
ab13ac9e3b8386b836eb581ee0a2cfdc.exe windows:4 windows x86 arch:x86
316f9661c85558da7e0cc9df6322c345
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
Sections
.text Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ