Static task
static1
Behavioral task
behavioral1
Sample
cab81e63a16da7db9d382999cd2ae4d0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cab81e63a16da7db9d382999cd2ae4d0N.dll
Resource
win10v2004-20240802-en
General
-
Target
cab81e63a16da7db9d382999cd2ae4d0N.exe
-
Size
29KB
-
MD5
cab81e63a16da7db9d382999cd2ae4d0
-
SHA1
5872d65f9122625c20c637ea44d48a79f7eee05b
-
SHA256
7bc5aef859ac62b3ab0ca84b77e436887d6f4c4ab77a58ac713f12cbb593e0ef
-
SHA512
9836b06f7deb13fc54696c67b4061fff306696cdfdbe1cb66368fbc4f7cca807436c36409fffb0cbbc7add39fcac286e3b6faac8e413a69108bb9d0b936702b1
-
SSDEEP
384:Am7tQn2mpuf5HfvxfPnQUf+FyABUPS5lDgKpB3/L265Z3YMRijBOjBfJOBx5eLW:AmpQnUfBTGI3PqvL263IgExf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cab81e63a16da7db9d382999cd2ae4d0N.exe
Files
-
cab81e63a16da7db9d382999cd2ae4d0N.exe.dll windows:5 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
GK Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GK Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GK Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GK Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GK Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE