Static task
static1
Behavioral task
behavioral1
Sample
ab9992de7ae5143434101d375b40bf45.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab9992de7ae5143434101d375b40bf45.exe
Resource
win10v2004-20240226-en
General
-
Target
ab9992de7ae5143434101d375b40bf45
-
Size
512KB
-
MD5
ab9992de7ae5143434101d375b40bf45
-
SHA1
ca89f18c5bed7fd032b2f081edd6c6a6eac910b9
-
SHA256
9ed9108eadda5b42d07cf921350d49656610b004fb9c58c1c87e8333aadec170
-
SHA512
a03202b891011670ee337ddbd967491bb66731bb93f8bc5aeb00f0df9e6dfc16102562ff1ca4b7bc97e3229756de270c41f635fef274881ac6bda49970f29b88
-
SSDEEP
6144:ysWu3Nhh+UFWFZ5NFu84Q2hTrk+89XCs4n0GFD3WOxCSz3lrixRS1cAZOf3cpIUK:ysWWhFsfh52dt89odZAE4RU/vSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab9992de7ae5143434101d375b40bf45
Files
-
ab9992de7ae5143434101d375b40bf45.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 802KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 290B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE