Static task
static1
Behavioral task
behavioral1
Sample
d4abb88f88f4835fd8a2b78e5886bff9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d4abb88f88f4835fd8a2b78e5886bff9.exe
Resource
win10v2004-20240226-en
General
-
Target
d4abb88f88f4835fd8a2b78e5886bff9
-
Size
268KB
-
MD5
d4abb88f88f4835fd8a2b78e5886bff9
-
SHA1
5259fadf841f5ec0142b4cac532569eba8b16f8d
-
SHA256
23cdde3b25716bb2c70072d5f04c582478dd7d64ef987d28dec0396931fdd082
-
SHA512
0810d33acebbde2e5a37e2b35b4a5bbd8ba31bc365cc2720eb73e886d75426f5ebe981516074d863748a46812449c85b4adc72f691fbcdef17b0b1783dd5a2ef
-
SSDEEP
6144:5n5WwCxyQNplDgZDofgCCWdm14Sy1zTM/xPZuooS:5n5Oppn5dmmSyqPZDoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4abb88f88f4835fd8a2b78e5886bff9
Files
-
d4abb88f88f4835fd8a2b78e5886bff9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xqkh Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fait Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE