Static task
static1
Behavioral task
behavioral1
Sample
6ab1bad5ece0b1de14211ed39851b34727f7d5b49b9d98b45eb3ea50ce1be4ef.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6ab1bad5ece0b1de14211ed39851b34727f7d5b49b9d98b45eb3ea50ce1be4ef.exe
Resource
win10v2004-20240226-en
General
-
Target
6ab1bad5ece0b1de14211ed39851b34727f7d5b49b9d98b45eb3ea50ce1be4ef
-
Size
202KB
-
MD5
4a9a3b4df57797efc7ea16b55046af01
-
SHA1
1d1d9c12b32704c2776dbd9d8904f6dec5c5f494
-
SHA256
6ab1bad5ece0b1de14211ed39851b34727f7d5b49b9d98b45eb3ea50ce1be4ef
-
SHA512
d9366e046dd50144b7b21cd3a6f3a7ef8be0a92c48735ed0382227c9b489bafcb403859fa930ebdcc852163649e0f88459b66ca8577f1a1508cd2b9292634294
-
SSDEEP
3072:cHRJY1NeBQizDMEQag4XOtiwd7c5Oqb+z+Zt0zmL8wtvfzWBfRGgn9cnQqM133sw:cHRUNgDz4E7qiwd77xjSTEfRGi5h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab1bad5ece0b1de14211ed39851b34727f7d5b49b9d98b45eb3ea50ce1be4ef
Files
-
6ab1bad5ece0b1de14211ed39851b34727f7d5b49b9d98b45eb3ea50ce1be4ef.exe windows:5 windows x86 arch:x86
f020e1a2feae651f7ce88318f285b500
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
TGDSEFR Size: - Virtual size: 580KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGDSEFR Size: 201KB - Virtual size: 204KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE