Static task
static1
Behavioral task
behavioral1
Sample
aa543beab54a90ebdb663c7899bacaeae8955e279bd3d5a7f32fa5eb9377855c.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
aa543beab54a90ebdb663c7899bacaeae8955e279bd3d5a7f32fa5eb9377855c.exe
Resource
win10v2004-20230621-en
General
-
Target
aa543beab54a90ebdb663c7899bacaeae8955e279bd3d5a7f32fa5eb9377855c
-
Size
5.7MB
-
MD5
6d436cf3876ec6f5a06d07d707b027ab
-
SHA1
25242975827ee1401c542e9b7006c7e45d78e4cc
-
SHA256
aa543beab54a90ebdb663c7899bacaeae8955e279bd3d5a7f32fa5eb9377855c
-
SHA512
dc539fd8621004580c73a7360af324c2b74e189b775891a36a4cc5ff8e132f3709257deac99e3ee919a55b16b729519bfae62ed7834e19188fd13efc89a19450
-
SSDEEP
98304:6P2K0Lu7C15zL6cbwXLpgYWdSc+f6HXUbW8sEJsQ22:6P29N1V6ccpgbdGaXUdsEJsQB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa543beab54a90ebdb663c7899bacaeae8955e279bd3d5a7f32fa5eb9377855c
Files
-
aa543beab54a90ebdb663c7899bacaeae8955e279bd3d5a7f32fa5eb9377855c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.0MB - Virtual size: 147.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt774 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt371 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE