Static task
static1
Behavioral task
behavioral1
Sample
ab8b2f1e229a36c4e2c68217a298c8b6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab8b2f1e229a36c4e2c68217a298c8b6.exe
Resource
win10v2004-20240226-en
General
-
Target
ab8b2f1e229a36c4e2c68217a298c8b6
-
Size
2KB
-
MD5
ab8b2f1e229a36c4e2c68217a298c8b6
-
SHA1
faf6c489b838479e025da814ca4ccdeafa364fdf
-
SHA256
354003ab2fb44bf73d8ac0861b585773f56c10fcb3e70239c2b7718523ce75e0
-
SHA512
0a0ffafc2f296eaa6c0f03d34c264eb4b6a865e3e1e26b70eed0b3d5df29d42a9dbb1a09200b02b2b0fcc0e1b8bd80f39533d8ae6de2e417c8fe6e38f725b0b5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab8b2f1e229a36c4e2c68217a298c8b6
Files
-
ab8b2f1e229a36c4e2c68217a298c8b6.exe windows:4 windows x86 arch:x86
8f3add8626204171354f235c2033a454
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
GetEnvironmentVariableA
GetModuleFileNameA
GetProcessHeap
lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
SetFilePointer
ReadFile
HeapFree
HeapAlloc
GetTickCount
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE