Static task
static1
Behavioral task
behavioral1
Sample
abded0578e7266217c62dbab45dbdcb0N.exe
Resource
win7-20240708-en
General
-
Target
abded0578e7266217c62dbab45dbdcb0N.exe
-
Size
1.7MB
-
MD5
abded0578e7266217c62dbab45dbdcb0
-
SHA1
4a86deb7782d2c6045170cb186a3854bcfd28837
-
SHA256
915837889e08c39d3dbd9792b070a76442cb84be81ed77939eb672eea8945a0d
-
SHA512
53021970f1f7bf112d3641a3bc0d20321f8c99bb22a81e857e2420c7da862694e6cb174b38e436cac00daf8fb7ec8df53ac9583daf00e4f977a92a5f318f70f7
-
SSDEEP
49152:SY7a/7x7hUMaj+oUyDg536PFL+dc2z2cyRdrFC:e/t7sj+V36NLiCA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abded0578e7266217c62dbab45dbdcb0N.exe
Files
-
abded0578e7266217c62dbab45dbdcb0N.exe.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 95KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
scdllrzn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qmbixlyq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE