Static task
static1
Behavioral task
behavioral1
Sample
3aaae616304e7ca897a2473d3c2d6e7a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3aaae616304e7ca897a2473d3c2d6e7a.exe
Resource
win10v2004-20231222-en
General
-
Target
3aaae616304e7ca897a2473d3c2d6e7a
-
Size
271KB
-
MD5
3aaae616304e7ca897a2473d3c2d6e7a
-
SHA1
5cf388d0df674543f657944777b29ff93a237461
-
SHA256
019b9d5431ed25be22ddefb0cfd1d2f29ae81a8cae770a187a258b1a83682dfd
-
SHA512
de3da230cf94441b83b2ef7a45cda6b0bc5d66d6ab24c3b4b4148f5ff20029231266574f36d07bebca7a15f7dcdf4b2477b6f243ebdeef679f53cff61644846d
-
SSDEEP
6144:x+7nVcZ4GDj2iFXFW85VLX7Sq9kNAcdQMB6047Ua8Ce:EBXG32iFX4M57fcnxyU1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aaae616304e7ca897a2473d3c2d6e7a
Files
-
3aaae616304e7ca897a2473d3c2d6e7a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.mrngbcc Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.okcqxjg Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrlohkn Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE