Static task
static1
Behavioral task
behavioral1
Sample
aa876e3e32aeaab494b8c8757bc8cab8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa876e3e32aeaab494b8c8757bc8cab8.exe
Resource
win10v2004-20240226-en
General
-
Target
aa876e3e32aeaab494b8c8757bc8cab8
-
Size
164KB
-
MD5
aa876e3e32aeaab494b8c8757bc8cab8
-
SHA1
823147da71de48b20798dc1d81028d0f4ce62548
-
SHA256
0981a1e792b101562757279b27c8f3d32c5b63e54c180386a2d5e0b9ea38d5f1
-
SHA512
3399e0efd7a427a1e68b7fde4b324d37258eb6451a63cdc4eda0b0ba328353dea5745ecf2cc45b1bd15927477a2f01ab8bfaebea271af78a65c89b174a0282d6
-
SSDEEP
1536:O/RXVhu4tUH6qd/3b313waLgK6NUuNONzakL0NLI3E7JtXaShnsX5B:2u4o6qd/LSDK6+u9UEttK2nspB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa876e3e32aeaab494b8c8757bc8cab8
Files
-
aa876e3e32aeaab494b8c8757bc8cab8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 48KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adate0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ