Static task
static1
Behavioral task
behavioral1
Sample
lag_Gabrk_v2.exe
Resource
win10-20240404-en
General
-
Target
lag_Gabrk_v2.exe
-
Size
24KB
-
MD5
1d28873fc85f1969402fea97e72d7266
-
SHA1
9f885cbdebb6b4481f64930c2b4d6316f054634b
-
SHA256
d17596dbb201d74d8c99a47ccef0c0d306d7f5cbcde472b062cd89fc8e375e61
-
SHA512
8080a6927dbf8e7e89564496bb7daed035ab21c75ff3d0460b0fcb38ebaeb4d62b21875b58e782a55591fd97a6c51e6dce7e7d5872f93874a5ad6f64a7412d41
-
SSDEEP
384:WLs5IbWUZQOQsWOpGkTLRq7x+hKFa3zmLT2gP/Zw3k5MWGO4AhqrT1hKmvCvfb:Qsi6UqsWuRE11fPOCh2T1hKeCvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource lag_Gabrk_v2.exe
Files
-
lag_Gabrk_v2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ