Static task
static1
Behavioral task
behavioral1
Sample
7aa0dfeb6358ab171aeb03474273b3ae8a67c759afb84b322afc638c88f53d32.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7aa0dfeb6358ab171aeb03474273b3ae8a67c759afb84b322afc638c88f53d32.exe
Resource
win10-20231220-en
General
-
Target
7aa0dfeb6358ab171aeb03474273b3ae8a67c759afb84b322afc638c88f53d32
-
Size
7.7MB
-
MD5
2db60a018ad5e7ad2f0500485b102b7a
-
SHA1
4408aa12da8424b3b9c1f7f740453c217f3aae26
-
SHA256
7aa0dfeb6358ab171aeb03474273b3ae8a67c759afb84b322afc638c88f53d32
-
SHA512
59cb4226b5bd4a26a00b7a410381812f4a77a8d1fe0a8b0626d544e691d18756b065fbe0170d2dbc3a4ba939d44d5f53f9f6e9f0ec5e10dceed5d7c4e524a9ac
-
SSDEEP
196608:0+dFzv8B6+p/631aq1yQRhoC9scyETjh0DwXDIzXhC4dD:LdlkS1a49kETjhu6i5dD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7aa0dfeb6358ab171aeb03474273b3ae8a67c759afb84b322afc638c88f53d32
Files
-
7aa0dfeb6358ab171aeb03474273b3ae8a67c759afb84b322afc638c88f53d32.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ