Static task
static1
Behavioral task
behavioral1
Sample
aa37d3fa1e628cd345b1c67ad014c53a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa37d3fa1e628cd345b1c67ad014c53a.exe
Resource
win10v2004-20240226-en
General
-
Target
aa37d3fa1e628cd345b1c67ad014c53a
-
Size
207KB
-
MD5
aa37d3fa1e628cd345b1c67ad014c53a
-
SHA1
3dbfe9f0a5de0929d8f6c506041d6a739e2c90ba
-
SHA256
bfb3c8e2cccee52e1ea71cb7a2a4fda8fe995cb5fb64131e3eff90690e532bc2
-
SHA512
03d2616319ed285d109571c9b0b21817c299ac4cd8e0315fde4d437f9f059c86875b9c88e5d7381bd6994e0ec918fdc09dde29cfe44a89b5dedaeab3c34b0d1d
-
SSDEEP
6144:vgUbb1VaCReqyQHXoTEuir3hid8TuaDTKLNgl:VhFX5uijhi2D+LQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa37d3fa1e628cd345b1c67ad014c53a
Files
-
aa37d3fa1e628cd345b1c67ad014c53a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.petite Size: 171KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE