Static task
static1
Behavioral task
behavioral1
Sample
0aff7b88242f893bf7daa43c00be5094faff50a5411072daa3f925186079411a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0aff7b88242f893bf7daa43c00be5094faff50a5411072daa3f925186079411a.exe
Resource
win10v2004-20240226-en
General
-
Target
0aff7b88242f893bf7daa43c00be5094faff50a5411072daa3f925186079411a
-
Size
118KB
-
MD5
e20e3056828f066c8fbe514d15640523
-
SHA1
a850511fca3a679c46345f9af3dcfc509794f504
-
SHA256
0aff7b88242f893bf7daa43c00be5094faff50a5411072daa3f925186079411a
-
SHA512
d0bb56e5be9355106e373678fb9b41a68c7e7184587091502e69ac8eb09e73f4df741797f66d87a3946bdfbff9f0bbac357edbd5140fea3b99a35aa635fd8af0
-
SSDEEP
3072:OE9j8b3ZXgKC1hX//iASOXRJzDOD26j/3Dc692:OEebiKuX//iZOXRJ3OD26jxs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aff7b88242f893bf7daa43c00be5094faff50a5411072daa3f925186079411a
Files
-
0aff7b88242f893bf7daa43c00be5094faff50a5411072daa3f925186079411a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ