Static task
static1
Behavioral task
behavioral1
Sample
Avevasion.exe
Resource
win10-20231215-en
General
-
Target
Avevasion.dll
-
Size
15KB
-
MD5
c970df0fade683559a6cbc81fd8ca3ef
-
SHA1
2c4b806989e733c31abf6d963d9b4baeb8f9858a
-
SHA256
86630d7a5f344b10a0e5ab4ce13d4551293f9b6493bb5a8fad0eaa05905a3808
-
SHA512
8aae1ed41b8c448c9409d1c78e02bbe45a2a3c83b91330475ad80908207a898ab885754d73822fbc890d42e66177c69d999d8a52fe0f938fe2774838d6caaf0f
-
SSDEEP
384:eTqdDuAY9zfbmQaWVgyY7ALthQrc9mLdGcZ2+B:y4PmbbOWVgyYkPgZZ2+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Avevasion.dll
Files
-
Avevasion.dll.exe windows:4 windows x86 arch:x86
Password: static1ex
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ