Static task
static1
Behavioral task
behavioral1
Sample
ab3a4e3efad4632b128f80f80efe97cd77875ebe04c4816b8e9b59b1d96a17ef.exe
Resource
win7-20241010-en
General
-
Target
ab3a4e3efad4632b128f80f80efe97cd77875ebe04c4816b8e9b59b1d96a17ef
-
Size
334KB
-
MD5
578a5e1c8203beaac541a7112a0cb49a
-
SHA1
3bf592530553339b7297580cd2a6e385e4507099
-
SHA256
ab3a4e3efad4632b128f80f80efe97cd77875ebe04c4816b8e9b59b1d96a17ef
-
SHA512
dba1ba6dd90df19770e56261b3f69205ad9ee181b37eff9957c06523b1f6051164bb537181d0f202d8708849fbe92806cbb00fc4dca0ad99df8d414ce58655bd
-
SSDEEP
6144:3cm7ImGddXsJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7tPh3:F7Tc8JdSjylh2b77BoTMA9gX59sTsuTH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab3a4e3efad4632b128f80f80efe97cd77875ebe04c4816b8e9b59b1d96a17ef
Files
-
ab3a4e3efad4632b128f80f80efe97cd77875ebe04c4816b8e9b59b1d96a17ef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ