Static task
static1
Behavioral task
behavioral1
Sample
ab978b33f92e96ed0521cf8bab588175326350e4fbf1fe0df64e1805d8ca8df5.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ab978b33f92e96ed0521cf8bab588175326350e4fbf1fe0df64e1805d8ca8df5.exe
Resource
win10v2004-20240508-en
General
-
Target
ab978b33f92e96ed0521cf8bab588175326350e4fbf1fe0df64e1805d8ca8df5
-
Size
448KB
-
MD5
23e26bb6f6e102928ca7bb566a022546
-
SHA1
6ca367fccf6a12d71910c9a4cb13f1f8a0df7ef3
-
SHA256
ab978b33f92e96ed0521cf8bab588175326350e4fbf1fe0df64e1805d8ca8df5
-
SHA512
590d5f0654726e0316e0eb00b109da61a8544c4ed5d7192652cde7e76694779252e6c983cc34e30d4bb4ee52aa54bb0aad059824aff5ed417b217498fc29ff9d
-
SSDEEP
6144:iuMI8ibucLLeOgo35e/yCthvUCQO+zrWnAdqjeOpKfduBX:yIfdLpgu5YyCtCC/+zrWAI5KFu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab978b33f92e96ed0521cf8bab588175326350e4fbf1fe0df64e1805d8ca8df5
Files
-
ab978b33f92e96ed0521cf8bab588175326350e4fbf1fe0df64e1805d8ca8df5.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ