Static task
static1
Behavioral task
behavioral1
Sample
Axion.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
Axion.exe
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
Axion.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Axion.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Axion.exe
Resource
win11-20240412-en
General
-
Target
Axion.exe
-
Size
15.0MB
-
MD5
bf737936fbb98e95e6c5d57c8f14eb9a
-
SHA1
d4f275fa475497009b04d64edc7c7383e733b622
-
SHA256
1b299ba3ce45aa95ad6ba964b9d286321ba3ad4b1f79df3935f58fb776fdf7b0
-
SHA512
636045f43f234115bd4b36b5ec2b9bf45eb44326ebcad5621deaa09a945b1ac0637303f290bae0ae84e0e796458bdd193ce2f415ee5d4f7d34b7246d1b6fac90
-
SSDEEP
393216:QaibS8wqodEiYSNzEuie1LdAAnJkNIKwaF894KnbEV0:QaibB5fk4uivKKKbs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Axion.exe
Files
-
Axion.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13.9MB - Virtual size: 13.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FH#U&#F Size: 915KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE