Static task
static1
Behavioral task
behavioral1
Sample
aa24d970701c23f3f4123f0e8618b56506d1a807bfb6d88a883c1d713e3cb530.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
aa24d970701c23f3f4123f0e8618b56506d1a807bfb6d88a883c1d713e3cb530.exe
Resource
win10v2004-20231023-en
General
-
Target
aa24d970701c23f3f4123f0e8618b56506d1a807bfb6d88a883c1d713e3cb530
-
Size
645KB
-
MD5
b9d95363b7405398ae875621e307cf6b
-
SHA1
cb35cf822437e0d733c362ca522c10161e395f8e
-
SHA256
aa24d970701c23f3f4123f0e8618b56506d1a807bfb6d88a883c1d713e3cb530
-
SHA512
c1372e7c13411f3cc0952c8fff7b5f176fc63618693b45c0175d3c1d1b4714fd23f911b983e22ddd7cc06d8ec8d79837af0a24055877560d17ca3bde8911167c
-
SSDEEP
12288:ZNW1ELYBWc3dF0br9nOmpccgM7yDlk9zFIz+ZzgM8E8LB:e1OYtr0tSM7yD9ezgpZN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa24d970701c23f3f4123f0e8618b56506d1a807bfb6d88a883c1d713e3cb530
Files
-
aa24d970701c23f3f4123f0e8618b56506d1a807bfb6d88a883c1d713e3cb530.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ