Static task
static1
Behavioral task
behavioral1
Sample
abdae78a77365b1e74e009b7ae8ec48a9c0f00851c388f3b40ee540c6fc8cb05.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
abdae78a77365b1e74e009b7ae8ec48a9c0f00851c388f3b40ee540c6fc8cb05.exe
Resource
win10v2004-20240426-en
General
-
Target
abdae78a77365b1e74e009b7ae8ec48a9c0f00851c388f3b40ee540c6fc8cb05
-
Size
1.8MB
-
MD5
c770d57e95b890a8b362f40b357f83f8
-
SHA1
ddb0e72b3db4b00015a530e9a728945693602124
-
SHA256
abdae78a77365b1e74e009b7ae8ec48a9c0f00851c388f3b40ee540c6fc8cb05
-
SHA512
c0b5a239962807c83e6ec381b23ec2dbcc29b30b784473e3d26bc2fa65ce92a256a2b3ce3dcb30accb5b3d2f49d998200038412b8385a8c463b8ee336f30b2c1
-
SSDEEP
24576:dpeGVvc6x43kLV1K0KMANq5zD2jrk59yj1:ve0vVxDJ1KUANpjo5EZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abdae78a77365b1e74e009b7ae8ec48a9c0f00851c388f3b40ee540c6fc8cb05
Files
-
abdae78a77365b1e74e009b7ae8ec48a9c0f00851c388f3b40ee540c6fc8cb05.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 667KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 297B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 512B - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/65 Size: 647KB - Virtual size: 646KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/78 Size: 354KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/90 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 214KB - Virtual size: 213KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ