Static task
static1
Behavioral task
behavioral1
Sample
aaea839ac56e059146f95f55f64b0ec7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aaea839ac56e059146f95f55f64b0ec7.exe
Resource
win10v2004-20240226-en
General
-
Target
aaea839ac56e059146f95f55f64b0ec7
-
Size
42KB
-
MD5
aaea839ac56e059146f95f55f64b0ec7
-
SHA1
bbc545c0c2e981396f4f792c7cf4af1b7a1078ce
-
SHA256
c528989854583bcab40e4870dc1a750ade2f766b6881868e9f24701ac3ad25b6
-
SHA512
b4804c207809f4cc4c59bac20619aaf91d1c8f5e8f691f3d81c1a0ef4d626dca4b3b4aa54e339fd1ba0115bc5ec74633d7ee165ce032042eaac877f45bdf50a1
-
SSDEEP
768:I8FSgVIyQe35MEVKkhXzFrrmwO3hPGfuFLBZQQNy06HTAkvmxzC8dLl81y9K1i8B:I8EgVxfpFaN3DPxNy06zAMF1yQo8T9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaea839ac56e059146f95f55f64b0ec7
Files
-
aaea839ac56e059146f95f55f64b0ec7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 419KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ