Static task
static1
Behavioral task
behavioral1
Sample
aa4029eefb2c9867112e043e0733022f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa4029eefb2c9867112e043e0733022f.exe
Resource
win10v2004-20240226-en
General
-
Target
aa4029eefb2c9867112e043e0733022f
-
Size
130KB
-
MD5
aa4029eefb2c9867112e043e0733022f
-
SHA1
306a3aba65c63f4cdf6c6690f4d8de706f947950
-
SHA256
350a0c790453db4f07333d0344ecfaf1fa82a5c2724b9b03193a5cd188e21fd2
-
SHA512
eb23e34812a19e9acfc5d6e201f7298fd57f8c27ebacc0f62fed656f6d60aa0f445ea187760e8b2b2760651a6d9db928fa007980926c363546284741bd14d3fa
-
SSDEEP
3072:Fvua90E+gHC8H8gIMnSPl9hWyD4ocOoqLrJumfZ6ZCGjeciCNs/:Fvuat+g9HlEPt7Rh69ec0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa4029eefb2c9867112e043e0733022f
Files
-
aa4029eefb2c9867112e043e0733022f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
b8t8 Size: 1024B - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c5 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ufppi Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ufppi Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE