Static task
static1
Behavioral task
behavioral1
Sample
aa8b4950717ed67001789649dd3d2ce7.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
aa8b4950717ed67001789649dd3d2ce7.exe
Resource
win10v2004-20240226-en
General
-
Target
aa8b4950717ed67001789649dd3d2ce7
-
Size
14KB
-
MD5
aa8b4950717ed67001789649dd3d2ce7
-
SHA1
8fa85ce39c5279b104847b773aa4d4854c53fcee
-
SHA256
7ff2e17273cf45564745382e126f0ad0f77fa3a575084c3c21187aa23d2978ca
-
SHA512
fdb2c571a16f8a37bdd49510f557a53441affe5bc532d2b84573d2170436e84337a601ca0e8a60e05b7ec74ead4892b8628705e76afe75b60ced8e8bb2eba896
-
SSDEEP
192:B2t5/p2yWwlOUDCEKxW4u2j97MUKzo0Szp3GhV1aFcyEYE+YaaU1SGqIAuea6Jb:6/+x2UYwRGvAcyEYEoSIApVbh6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa8b4950717ed67001789649dd3d2ce7
Files
-
aa8b4950717ed67001789649dd3d2ce7.exe .ps1 windows:4 windows x86 arch:x86 polyglot
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE