Static task
static1
Behavioral task
behavioral1
Sample
ab6b6231d88c9bdcf6020729bf2fc8cf.exe
Resource
win7-20240220-en
General
-
Target
ab6b6231d88c9bdcf6020729bf2fc8cf
-
Size
462KB
-
MD5
ab6b6231d88c9bdcf6020729bf2fc8cf
-
SHA1
6479eb7147d6b9857e1b73041d739c79dc44c977
-
SHA256
0bc066a54be70ad26977e8bc5a24d56c98835c0ce77ddfa643e9403832e25d46
-
SHA512
d38a158f1291fea34e975c74d6194f5d4abe690a48832de60dd79472212eebdfea40160504660e214f721ffca29e25019d097fcd05ff3149cf639e816612c9d7
-
SSDEEP
12288:kYFx0AQ2hAhVLns9p9nlxlE9WXixV31r:kox0AhyhVgp9cWXijFr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab6b6231d88c9bdcf6020729bf2fc8cf
Files
-
ab6b6231d88c9bdcf6020729bf2fc8cf.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 393KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ