Static task
static1
Behavioral task
behavioral1
Sample
b3ab7879beedc937407ae86567fd0e1084e6d073ab20177fec06db2fa5d1ff6d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b3ab7879beedc937407ae86567fd0e1084e6d073ab20177fec06db2fa5d1ff6d.exe
Resource
win10v2004-20240226-en
General
-
Target
b3ab7879beedc937407ae86567fd0e1084e6d073ab20177fec06db2fa5d1ff6d
-
Size
131KB
-
MD5
2d53447655ef4fb6adcb4ca11709d111
-
SHA1
f659d1de18c056bbad65549206435eda7950c5ad
-
SHA256
b3ab7879beedc937407ae86567fd0e1084e6d073ab20177fec06db2fa5d1ff6d
-
SHA512
81a90d11d8afff417dad61df3896d2c4cfbe316c8d42fe85861e7a93294673f2aa9ea9e027e99683ac798455d31c4ed6f72c3bc4fc26f095075aa5bb4e599137
-
SSDEEP
1536:xwJAw8P1JH+bZSnQUAwQbgL4O1tyVBtcN9Lh/VJRCJwVOK3tnbqBDldHazJeLnf2:xiGJH+nUAwQ8/vJP1aB9awL3ubUl8W8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3ab7879beedc937407ae86567fd0e1084e6d073ab20177fec06db2fa5d1ff6d
Files
-
b3ab7879beedc937407ae86567fd0e1084e6d073ab20177fec06db2fa5d1ff6d.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 124KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE