Static task
static1
Behavioral task
behavioral1
Sample
ae0d1ec850d6059b133941311a58b71d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ae0d1ec850d6059b133941311a58b71d.exe
Resource
win10v2004-20240226-en
General
-
Target
ae0d1ec850d6059b133941311a58b71d
-
Size
329KB
-
MD5
ae0d1ec850d6059b133941311a58b71d
-
SHA1
90ee00e2341e98226ca021c824a4722ba50678d5
-
SHA256
3e84312e20912462ee3813b78d1a780f0aa227b02075b841ffb1e9949cbc3eed
-
SHA512
a96c2186670bd36262a5e6bd041a44751b7be53c4bdf0ecd3a94160c93da5b494a6415f55339f727aad484d9f5b8180285cb918608122aeb5b61c79f37e0172d
-
SSDEEP
6144:cuWq8D/knK0nZZtEaHlBJOZS0dXYxH4URF:c1Z/j4HHCSOiYS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae0d1ec850d6059b133941311a58b71d
Files
-
ae0d1ec850d6059b133941311a58b71d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ