Static task
static1
Behavioral task
behavioral1
Sample
7aefa45c0670ab82adfdb846292a9e0a5bedbfd78321b55c14aedc3105c3feef.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7aefa45c0670ab82adfdb846292a9e0a5bedbfd78321b55c14aedc3105c3feef.exe
Resource
win10v2004-20230703-en
General
-
Target
7aefa45c0670ab82adfdb846292a9e0a5bedbfd78321b55c14aedc3105c3feef
-
Size
1.1MB
-
MD5
493d6f71764ee0581ed1e7d8091aeab9
-
SHA1
ea4ca0a8170e8f67e5f2161e58f2606aa7203681
-
SHA256
7aefa45c0670ab82adfdb846292a9e0a5bedbfd78321b55c14aedc3105c3feef
-
SHA512
1ee6e7009c5e6443014e2521b051b59bbb88d83058ae504b94f154c9168838245eeba6816078597a3bcf063172c440517ee862e0e71aa525fbd2764b1f39e8c6
-
SSDEEP
24576:wjG8sGf7HXvV0gCBsyP96x0NMJCKYDiqJ5ATN:wqRy3d0gCOkKYDnJU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7aefa45c0670ab82adfdb846292a9e0a5bedbfd78321b55c14aedc3105c3feef
Files
-
7aefa45c0670ab82adfdb846292a9e0a5bedbfd78321b55c14aedc3105c3feef.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 176KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE