Static task
static1
Behavioral task
behavioral1
Sample
ae58ffd9dc82fb6f53f3578c1c9dfdd9e1bf418717c47abcc7822618b52e4e12.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ae58ffd9dc82fb6f53f3578c1c9dfdd9e1bf418717c47abcc7822618b52e4e12.exe
Resource
win10v2004-20230703-en
General
-
Target
ae58ffd9dc82fb6f53f3578c1c9dfdd9e1bf418717c47abcc7822618b52e4e12
-
Size
349KB
-
MD5
813734d97aa8cf94534e3f6a181b4906
-
SHA1
d05395e6419260ac5da6c43ffecea99bcbb57e7e
-
SHA256
ae58ffd9dc82fb6f53f3578c1c9dfdd9e1bf418717c47abcc7822618b52e4e12
-
SHA512
fc160914d2ccc448130704e5269c9de6ba7d731dce6b100e920416ef26b94533c8d9b49de02f8958396f5bc0979c942988921de8d3182d45c4eaaaa4315d4a43
-
SSDEEP
6144:0+aEERstw+XkLu7KemfH8KHZRdptrinxKvNFgRPlBHVnkOA5H:DaEROK5Ufn1qxUgRPlVVkO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae58ffd9dc82fb6f53f3578c1c9dfdd9e1bf418717c47abcc7822618b52e4e12
Files
-
ae58ffd9dc82fb6f53f3578c1c9dfdd9e1bf418717c47abcc7822618b52e4e12.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ