Static task
static1
Behavioral task
behavioral1
Sample
aa0f33692568df4f5a976b6ad7c3ccc391a901202daa7206353103679288e29c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
aa0f33692568df4f5a976b6ad7c3ccc391a901202daa7206353103679288e29c.exe
Resource
win10v2004-20230703-en
General
-
Target
aa0f33692568df4f5a976b6ad7c3ccc391a901202daa7206353103679288e29c
-
Size
13.6MB
-
MD5
d2d04de993c782f6ecbb6f888d63fb98
-
SHA1
1d02a505137cae7cb6150cce416e905e29f91660
-
SHA256
aa0f33692568df4f5a976b6ad7c3ccc391a901202daa7206353103679288e29c
-
SHA512
a64fa2a38fbd035c191ca37bf13867b3372167d50e937099698bfbf04630122100b36eb4b26dc566a229a5714d2c3754bccb1d14b025683e66d5afb02503c67e
-
SSDEEP
196608:9XQir8VBdp4KpdqC7MRPOZbjA7aM1pTu+HzpyyNuVc/bfAbyoxgLGL:9rMn57M+A3ppzxoqjrygL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0f33692568df4f5a976b6ad7c3ccc391a901202daa7206353103679288e29c
Files
-
aa0f33692568df4f5a976b6ad7c3ccc391a901202daa7206353103679288e29c.exe windows x86
8598c62fe6b34b0785abfe7e2cf8c084
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
user32
MessageBoxA
shell32
ShellExecuteW
wininet
InternetOpenA
shlwapi
PathFileExistsA
ws2_32
inet_addr
Sections
.text Size: - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 687KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 2.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 408KB - Virtual size: 404KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE