Static task
static1
Behavioral task
behavioral1
Sample
0ab252ca154224df13b6a9a84af14310N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ab252ca154224df13b6a9a84af14310N.exe
Resource
win10v2004-20240802-en
General
-
Target
0ab252ca154224df13b6a9a84af14310N.exe
-
Size
472KB
-
MD5
0ab252ca154224df13b6a9a84af14310
-
SHA1
8ed73c13f1169a2d43b32f0d617b8b7650e95e63
-
SHA256
9c04980f9a6a18607c3d5c0c1a0ecd8678d8a3b9e3205bd15f4f7b5d42c4077e
-
SHA512
f16460b4206d2dca5c74161d902ef507f3fbb40e260df4a138875cd4482e087de365562947c2718536ea330eaab6b2b42fd2332f8c07f090820b38ab747a0ec6
-
SSDEEP
3072:7g8RinudiP52xx67lLdQiHDo4JySkKGmsaz/w71bPa+qgY:7FkgiPA6R+P4JJaas71GCY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ab252ca154224df13b6a9a84af14310N.exe
Files
-
0ab252ca154224df13b6a9a84af14310N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ