Static task
static1
Behavioral task
behavioral1
Sample
aad14bc38647923d2e49b9ee5fb5607cdcf4abb04c72c2b20fbc7a2c6fd1ae15.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
aad14bc38647923d2e49b9ee5fb5607cdcf4abb04c72c2b20fbc7a2c6fd1ae15.exe
Resource
win10v2004-20240412-en
General
-
Target
aad14bc38647923d2e49b9ee5fb5607cdcf4abb04c72c2b20fbc7a2c6fd1ae15
-
Size
68KB
-
MD5
3312d7faeb493b900e46643b8c4c986b
-
SHA1
3802fa8acc52d45ec7eb5816b62d833dfe070004
-
SHA256
aad14bc38647923d2e49b9ee5fb5607cdcf4abb04c72c2b20fbc7a2c6fd1ae15
-
SHA512
7910450bf375c625019f056d28e5ef366f7e8f76977ead4789e82953cfe8dc0d4f73ab6f7753e086ef47f0d03acd4b375c420b088aa4c23549c1881e72308621
-
SSDEEP
1536:Y2f76opqaQRS0oMcSloy3nqjhDrmKICn+:YPNISlb6jNqrCn+
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_SmartAssembly -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aad14bc38647923d2e49b9ee5fb5607cdcf4abb04c72c2b20fbc7a2c6fd1ae15
Files
-
aad14bc38647923d2e49b9ee5fb5607cdcf4abb04c72c2b20fbc7a2c6fd1ae15.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ