Static task
static1
Behavioral task
behavioral1
Sample
a09af28bc26420e3c28e81807c50e8fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a09af28bc26420e3c28e81807c50e8fe.exe
Resource
win10v2004-20240221-en
General
-
Target
a09af28bc26420e3c28e81807c50e8fe
-
Size
506KB
-
MD5
a09af28bc26420e3c28e81807c50e8fe
-
SHA1
2c12c612b6f482f1ae12019364efcea4dc2c61c2
-
SHA256
505e6ef7f080978b3a20034e7b462f0ad1207720e32b5e80633c387c001f61a7
-
SHA512
2ea61f4534e79c5d806810f3f2f438e50e998ac11eafa6471aa1f8d3bf245898ce2fa410cb910166204df91d063053741c68c7fbea14a8fec8132e703fab5f25
-
SSDEEP
12288:q7ch6vVHpX9SqqFr5PfVS5V4wXHY8DL43Ib4jH2DuWu6Iw6gHKt2JWgq83wQ1Hsy:pOX9NtrAWytCU+Whbhy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a09af28bc26420e3c28e81807c50e8fe
Files
-
a09af28bc26420e3c28e81807c50e8fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ