Static task
static1
Behavioral task
behavioral1
Sample
aebc69bf662699ba27484b647e03af2ca1ffa995f2edcce609c0171a6e042efe.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
aebc69bf662699ba27484b647e03af2ca1ffa995f2edcce609c0171a6e042efe.exe
Resource
win10v2004-20230915-en
General
-
Target
aebc69bf662699ba27484b647e03af2ca1ffa995f2edcce609c0171a6e042efe
-
Size
4.2MB
-
MD5
df5fe251dd7c47913b3c490469978b87
-
SHA1
a5cb7ecb67be6c0a91809c6ddca2917698291f58
-
SHA256
aebc69bf662699ba27484b647e03af2ca1ffa995f2edcce609c0171a6e042efe
-
SHA512
727cbeee50d27ddef10d28dae20ca4232384e341631d091fab1c5bf5283eef94bdd79f4d233425104e91f8f7199cded40de98db444c20175c1304abcdff8d148
-
SSDEEP
98304:WpFeqysfvrzzBR8LxrE15/HgOR/5mMShylpYm8m:vqvX/zAW19rvkIi5m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aebc69bf662699ba27484b647e03af2ca1ffa995f2edcce609c0171a6e042efe
Files
-
aebc69bf662699ba27484b647e03af2ca1ffa995f2edcce609c0171a6e042efe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.6MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ