Static task
static1
Behavioral task
behavioral1
Sample
ab8ab5b3eb3c9d032ae5b408aafff69d3390be835dc4c39916a8b2aaa0416056.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
ab8ab5b3eb3c9d032ae5b408aafff69d3390be835dc4c39916a8b2aaa0416056.exe
Resource
win11-20240802-en
General
-
Target
ab8ab5b3eb3c9d032ae5b408aafff69d3390be835dc4c39916a8b2aaa0416056
-
Size
1.8MB
-
MD5
a2fee814e8ed64a9cb72c771248e1ad3
-
SHA1
830c52bf80aa65ef76d4093fcfe7ff6368c0a71b
-
SHA256
ab8ab5b3eb3c9d032ae5b408aafff69d3390be835dc4c39916a8b2aaa0416056
-
SHA512
5b050477ec788c92638877ae28ac15f7e09dcefcec941bdfd45200ee144bbfc8f0a5ab2aa70cab61c501589f65a4f46599f4043996dc668c4e649fb629d5a7d5
-
SSDEEP
24576:YbnNSe1lLyKE6XzxOup0TlEDVjENC1jsWJWoV4XXo9hpSuGPYdkQ5VJsTlGK6kRL:FiyKfX8vlExQclShXo/8uGs0b7i6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab8ab5b3eb3c9d032ae5b408aafff69d3390be835dc4c39916a8b2aaa0416056
Files
-
ab8ab5b3eb3c9d032ae5b408aafff69d3390be835dc4c39916a8b2aaa0416056.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kgsirhnp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvpvqldy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE