Static task
static1
Behavioral task
behavioral1
Sample
a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a.exe
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
a.exe
Resource
win10v2004-20231215-en
General
-
Target
a.exe
-
Size
870KB
-
MD5
dadb6aab96ab8c6bab51dff60ab27092
-
SHA1
a2a540c6b32c8c67ebd1081cc318bace9477c943
-
SHA256
00d97ad729aaf3482d0355b6c7abae7c1818278e183251972adf5400e8934ab8
-
SHA512
3eb00d7238c2726e0db75665b79fbf76e5912543cfc743321b0f0bb111de32cf85adfc6b0af03e0b700f744758a6dced277cf7bcd81064824e12ed80035c24a9
-
SSDEEP
12288:O5t/v7QWNXl/aUZHhM+ZTnmjHkoTXmfa+algv46XC5U+oX7sWfssFTFs0E+uE:SX1od+aCQ6XyU+jmsaFs0du
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a.exe
Files
-
a.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 859KB - Virtual size: 859KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ