Static task
static1
Behavioral task
behavioral1
Sample
aa30a8ffeb3e95138d39a5cec2ed4d3a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa30a8ffeb3e95138d39a5cec2ed4d3a.exe
Resource
win10v2004-20240226-en
General
-
Target
aa30a8ffeb3e95138d39a5cec2ed4d3a
-
Size
492KB
-
MD5
aa30a8ffeb3e95138d39a5cec2ed4d3a
-
SHA1
51aa827db48285ebc65d4dfbdba55bb9e3a7b241
-
SHA256
ffba7fd40f6bab2849e9e51145687037d5578a7ad40f62353dbd29373eea29e6
-
SHA512
937b0e6799e0e75aa2169c8b18e8cd2e43738008f8dc60d716e0c17e452b16395a3cc22247ddb3de56dcb50de363f834962fd9d2c473488efa6f57c7bc45062d
-
SSDEEP
12288:UZWtI6RkJKLu0YeZJys73dOvXDpNjNe8Nut:UuhaAMeZJ8NI8K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa30a8ffeb3e95138d39a5cec2ed4d3a
Files
-
aa30a8ffeb3e95138d39a5cec2ed4d3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ