Static task
static1
Behavioral task
behavioral1
Sample
d0abdec7b0bd7a93d7b29ebae50d2741cdebf54825145f191643af51dec02854.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0abdec7b0bd7a93d7b29ebae50d2741cdebf54825145f191643af51dec02854.exe
Resource
win10v2004-20240226-en
General
-
Target
d0abdec7b0bd7a93d7b29ebae50d2741cdebf54825145f191643af51dec02854
-
Size
41KB
-
MD5
c3f985a35e440fa3c363d8e00a94a12d
-
SHA1
5b36dc86dad9db3ae147e42b93372f905d0caa99
-
SHA256
d0abdec7b0bd7a93d7b29ebae50d2741cdebf54825145f191643af51dec02854
-
SHA512
4c1e75e7ff0067d50d17ed1efef65841609ed0cb040fdd48d8c59170803b7afae3ca4f179ffe8b2484f22f4231ffc2e357562b60bb901321f44d80f8a8970475
-
SSDEEP
768:+iZNPp0b5BbrMVUTBv6mkZ8jA7IwnDoSdp:+WNBGBrM6Fv6mkqyo8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0abdec7b0bd7a93d7b29ebae50d2741cdebf54825145f191643af51dec02854
Files
-
d0abdec7b0bd7a93d7b29ebae50d2741cdebf54825145f191643af51dec02854.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�Api Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Air Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Daun Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE