Static task
static1
Behavioral task
behavioral1
Sample
ad753afab9594e24d75596e7198e0eb6.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ad753afab9594e24d75596e7198e0eb6.exe
Resource
win10v2004-20240226-en
General
-
Target
ad753afab9594e24d75596e7198e0eb6
-
Size
712KB
-
MD5
ad753afab9594e24d75596e7198e0eb6
-
SHA1
80088315c3904d1c2865294ee9df738d18395e39
-
SHA256
ca8fd873e63ed2d7463a09dec6bffb84d430183a88e89c8ac764116c22fd5b66
-
SHA512
66e5ca4349c51e650bc6b06869260ee446bd9279804a22473a90adad9d88533a6dc51d3051ba65a69665fe79491b8f3ad191e79c7aac921c0abc74a242848087
-
SSDEEP
12288:OaaRrhY8+ttdfix6GzpXafQwbgCXGRQQnbsKR9XDEONdTaxbzk/EK4FRTrVb4TYb:/UMtt3+4YwbgCWalKvXNMpznpRTr94TW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad753afab9594e24d75596e7198e0eb6
Files
-
ad753afab9594e24d75596e7198e0eb6.exe windows:4 windows x86 arch:x86
5624dbf5142c088aae5da9911b51171b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryW
Sections
Size: 49KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crfspolx Size: 657KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yuvfahua Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE