Static task
static1
Behavioral task
behavioral1
Sample
a0fa7cc58218995acd74347b2e44db7e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a0fa7cc58218995acd74347b2e44db7e.exe
Resource
win10v2004-20240221-en
General
-
Target
a0fa7cc58218995acd74347b2e44db7e
-
Size
224KB
-
MD5
a0fa7cc58218995acd74347b2e44db7e
-
SHA1
01f441d6aa34757b9a1575460b2a4dd5185cb658
-
SHA256
32d3db581af04eaaaa657fe20b4d1f48e14e34f219d2b59a2f92f06078bd6097
-
SHA512
492dadbcba3463fc81a3c20e144ce73cba5a0b08cc0433b3d208c429f463fe5175850b85c18bc7013251302927d71571e02d5bc70a48f513cb11c3bde40b3121
-
SSDEEP
3072:weE2dcNCfanhFEzX9D0vlbhcVWR73GpkuZlP3GBBWpU9p7xSpauBzGdxIfvoKCGS:s2GWoltbGp7I/99IIsAKx4Y/Ml6Je1t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0fa7cc58218995acd74347b2e44db7e
Files
-
a0fa7cc58218995acd74347b2e44db7e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 533KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ