Static task
static1
Behavioral task
behavioral1
Sample
abf3fc788f98004842eafb21bc67da51.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abf3fc788f98004842eafb21bc67da51.exe
Resource
win10v2004-20240226-en
General
-
Target
abf3fc788f98004842eafb21bc67da51
-
Size
20KB
-
MD5
abf3fc788f98004842eafb21bc67da51
-
SHA1
b80dd6b0cc3908bcc2022b8febca51b6c879f8ae
-
SHA256
9b2baba1626ff1835b18994ccf0b51b29c79450ad895d51d74ce65b048494d28
-
SHA512
5b93ba3645cb46125d2869198a88711373080ef6fb770d449820024e4c29a5c2543dcec69e156c74772d0f53338080cf4c8afca12243e2e1f10466225e1ddc29
-
SSDEEP
384:04iZT93XdfBAEUObWXkH6ExnQINJnVH07hh1OgdUkScI5PznKW+pU:0798EUOb9xnQ6FVH07hh3dUkScIRKQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abf3fc788f98004842eafb21bc67da51
Files
-
abf3fc788f98004842eafb21bc67da51.exe windows:4 windows x86 arch:x86
d0626bb655c0c7084048b9402dfbbbae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__threadid
__toascii
_adj_fprem
asin
_chdir
_atodbl
kernel32
FreeVirtualBuffer
FindResourceA
GetBinaryTypeA
GetCommandLineA
GetConsoleCP
GetConsoleFontSize
Sections
.text Size: 13KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE