Static task
static1
Behavioral task
behavioral1
Sample
abf98d5f39533b66b6cf86be774b7638.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
abf98d5f39533b66b6cf86be774b7638.exe
Resource
win10v2004-20240226-en
General
-
Target
abf98d5f39533b66b6cf86be774b7638
-
Size
55KB
-
MD5
abf98d5f39533b66b6cf86be774b7638
-
SHA1
a19617940b18e45952f9332d38f011d0a4912cd5
-
SHA256
c1595364028864843d7e7a42566e3df80639595a05ec6cc6937c9180b682fc22
-
SHA512
46162e2bf288a6a31cba9511c1f151390c754812831edadb162d95c9483333a2a18a95c651aa59a3af020a77bc089fb15c25de63f435fd72868559d78be87193
-
SSDEEP
768:SWqT4yE9SgAp7oFmK0VVz0/v7j1l8+nrmy4v1rZRQuy9cxs9V9sBA9uK4WnlgZT1:02SAGXqLay8b7yms1sm1nQTzwgoRCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abf98d5f39533b66b6cf86be774b7638
Files
-
abf98d5f39533b66b6cf86be774b7638.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ