Static task
static1
Behavioral task
behavioral1
Sample
ae171cae903f422e40a2be5b30f0eb56.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ae171cae903f422e40a2be5b30f0eb56.exe
Resource
win10v2004-20240226-en
General
-
Target
ae171cae903f422e40a2be5b30f0eb56
-
Size
30KB
-
MD5
ae171cae903f422e40a2be5b30f0eb56
-
SHA1
740b0e150e93e40fa7073f0d7058dcce6e6b7d49
-
SHA256
0f0ac9b2b48f26c1609648514d93c30e60eae5de6618b33e0a03ebe5746ce50a
-
SHA512
2f60f7f32dba5c75707dabe4d478affe9e1736682f06a60bbb356ab6a00bca3fb0248eba580d33a9a20073468f9606afa526a1ef4ff44d87e16f9d812fb17fad
-
SSDEEP
768:svUjTFmlCoR0fMNma529uL7E7EfGywr/PI:NjTmCO5UaH7BerHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae171cae903f422e40a2be5b30f0eb56
Files
-
ae171cae903f422e40a2be5b30f0eb56.exe windows:4 windows x86 arch:x86
ac9eb1085b6eee2907a6ad89926cf94d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
SHGetSpecialFolderPathA
Sections
CODE Size: 21KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE