Static task
static1
Behavioral task
behavioral1
Sample
abde681314cb2ac7e85de0de9968a169.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abde681314cb2ac7e85de0de9968a169.exe
Resource
win10v2004-20240226-en
General
-
Target
abde681314cb2ac7e85de0de9968a169
-
Size
267KB
-
MD5
abde681314cb2ac7e85de0de9968a169
-
SHA1
30c5e3285768cfba045e8c610c8f87021e15359e
-
SHA256
ca8ff130b779ec10cfa89d4964fe644698a70dfe5450b88416f149b7a5162cab
-
SHA512
08e2c3f61eb6acbc110723c0e1bf4bebc41805c523004f94a13708d91e2c41394c712a5dd69dfea6a9dc77b39db49c010f2a3eb377f1ea1631c58c5cb223ca1b
-
SSDEEP
6144:rJ01GYlMWwdKAHNU13B/7SGryfq/Xn4GMdKY2t+Y5bB7snG4WJP1:r+1fCWRTSG2y/X4G2KLt+YdB7snGTR1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abde681314cb2ac7e85de0de9968a169
Files
-
abde681314cb2ac7e85de0de9968a169.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
90�60 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
90�61 Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
90�62 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE