Static task
static1
Behavioral task
behavioral1
Sample
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe
Resource
win10v2004-20240412-en
General
-
Target
fbf1138050b0e49f5711b679f8b2cb5a7b9cf719dc8f78bd1bb904e03ebe61ed
-
Size
42KB
-
MD5
ececa9117dd25708d2335692bb1d71fe
-
SHA1
a26bd1dc4c90e995a94822e861714d01a7517398
-
SHA256
fbf1138050b0e49f5711b679f8b2cb5a7b9cf719dc8f78bd1bb904e03ebe61ed
-
SHA512
6b3944dc4dd48c67204f6a797b025c4cc5a62f069412c3891784f894544a58f23891caa7d4271f4a152c1969fa56cec405cadf0f907b72e653aeea881b07f8aa
-
SSDEEP
768:orkWUWI6wRtE+B/ZWZzEbepsjD9DI6/guX2uH7/6ejYewnxPdfZGDFx:hWJNw7B/opGssjD66/guGAD6e/wtGDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe
Files
-
fbf1138050b0e49f5711b679f8b2cb5a7b9cf719dc8f78bd1bb904e03ebe61ed.zip
Password: infected
-
ab38891963c65c3ceb20c156563adf234b3fe26116dc2496e10f463b74df27e9.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ