Static task
static1
Behavioral task
behavioral1
Sample
AOS_F1_2023.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
AOS_F1_2023.exe
Resource
win10v2004-20231023-en
General
-
Target
550321236c1624ae0f715ef180689ab318e3dfb4f3306ff37dd1ca76e73a56c4.zip.zip
-
Size
5.0MB
-
MD5
bd7ee43948536dc67a5d99dde8dc21d9
-
SHA1
58d85ae3653b333990e934802eda070213bb3401
-
SHA256
dec94fd4b394c25d1c578a66a43d11c1fe2864eed04a6af5d0393508c09c5382
-
SHA512
6d464f301a043ac6951b630c9bd63b4807b27f15636f3b464e03aa9135c32b7cf72d3190219b8f61f9a2b54550ae264fad0172dfd44ed4c198688b3b16419643
-
SSDEEP
98304:BbQV4MRp0XTwuGB/JeEIHXMD8faRQVLuegcNpjp3YlA7rt3jcTRf:BkV4MRpYliUJMwfhVLuenNr37/t3j8V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/AOS_F1_2023.exe
Files
-
550321236c1624ae0f715ef180689ab318e3dfb4f3306ff37dd1ca76e73a56c4.zip.zip.zip
Password: infected
-
550321236c1624ae0f715ef180689ab318e3dfb4f3306ff37dd1ca76e73a56c4.zip.zip
-
AOS_F1_2023.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ