Static task
static1
Behavioral task
behavioral1
Sample
2aa4563b057c99fcfb37ac504ea1b0d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2aa4563b057c99fcfb37ac504ea1b0d7.exe
Resource
win10v2004-20231215-en
General
-
Target
2aa4563b057c99fcfb37ac504ea1b0d7
-
Size
29KB
-
MD5
2aa4563b057c99fcfb37ac504ea1b0d7
-
SHA1
123a2940216973d84d1fc17bbd7ed50b11bc9088
-
SHA256
71f248984c3756578d9a4cea6c3be2a1474b4dc60106e4050dc51b19e58f2cee
-
SHA512
8a1226cfe0aed54c0d8ce7e6b847372414b10066df3b8bd7ab0c72dc02144f92db788df6837b9336146628e0c8bce2b0a2c427eae83866eafad793d87dae42e0
-
SSDEEP
768:geLMhlzjRKiQWgdgmWhtaHxNZbR3Xe9lZ3FSe:1AzjRpngfsaHv3eJf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aa4563b057c99fcfb37ac504ea1b0d7
Files
-
2aa4563b057c99fcfb37ac504ea1b0d7.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 927B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ