Static task
static1
Behavioral task
behavioral1
Sample
ac8bab2e9cf46254bc574cc10f48daee.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac8bab2e9cf46254bc574cc10f48daee.exe
Resource
win10v2004-20240226-en
General
-
Target
ac8bab2e9cf46254bc574cc10f48daee
-
Size
400KB
-
MD5
ac8bab2e9cf46254bc574cc10f48daee
-
SHA1
40b1ae7b1938ebf1cab7100357777ce6ab62ea93
-
SHA256
55dec8774a6fb99968782fccdc8f39b573c7fd126ead84a8b7d0fa5a0e7d62d4
-
SHA512
f2d1058f1c2f7de5941fe4a29f9655fc1503125aaea6891d332a0dffad6233a2e6e68d10258d022eb663f4163e2f824e3ac5122ceb7cfa31d54fd9328d0f529e
-
SSDEEP
6144:Gx1BIF7bxfDr+lOHYAU3MwqVuj0QqYnJp/E8acguuslMv:Gx1K5xfPJ1Vuj0QqKJWpgw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac8bab2e9cf46254bc574cc10f48daee
Files
-
ac8bab2e9cf46254bc574cc10f48daee.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
v3bpv.wy Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1n916xvx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ