Static task
static1
Behavioral task
behavioral1
Sample
aa625ff360c2f0c033030d28b9e3c79f.exe
Resource
win7-20240221-en
General
-
Target
aa625ff360c2f0c033030d28b9e3c79f
-
Size
357KB
-
MD5
aa625ff360c2f0c033030d28b9e3c79f
-
SHA1
a3652cba8fae10362c2933b904237f8502519403
-
SHA256
3a1478eb7396080e5ad8bb052d05592f0a0808cfaee3c8975581ff80795e0f30
-
SHA512
fddbd1e090ed01f94c3de85fbcf8d5e4a24012c721ee542ebaf75dd0c25c72f460b07f3c449000f780265e2172ffd796517ad322ff61d39b4f6d1e1a390dcada
-
SSDEEP
6144:D9NN2YtS1orvG+ZAi8HWe7mSeMeQyfq/jL8dmc:3eQe7MMvYqrL8dmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa625ff360c2f0c033030d28b9e3c79f
Files
-
aa625ff360c2f0c033030d28b9e3c79f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ