Static task
static1
Behavioral task
behavioral1
Sample
AimStar.exe
Resource
win7-20240221-en
General
-
Target
AimStar.exe
-
Size
9.5MB
-
MD5
a9b9407dd5f2d9248cca95e01d6a208c
-
SHA1
3791bfb8661af2e3780651db6ee6b40c534adb90
-
SHA256
5658114d897617dd31fc53061ea53abb32061ca197f9ff795859fa63420dd0fc
-
SHA512
f792a598802874de5f269e896cb5b69f6ba004d1c5c4b670145e102172030401035d32df6e051b6c979a10af4951906b7f925210cf225b04b3c79a85fb764b95
-
SSDEEP
196608:fYLG31ly0jRSexrmR1Ia943QfLIztWxvyhruzNX6gp+CrlwcZQmknoMnvrH4Y:rFoMzxrmR1Ia943QEYxWu5bzrljqf4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AimStar.exe
Files
-
AimStar.exe.exe windows:4 windows x86 arch:x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ