Aaskdjws.pdb
Static task
static1
Behavioral task
behavioral1
Sample
53c678a9ede5f0cc1c560195a47a18e0ab98bf4346705d3241f4f352908c7014.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
53c678a9ede5f0cc1c560195a47a18e0ab98bf4346705d3241f4f352908c7014.exe
Resource
win10v2004-20240419-en
General
-
Target
53c678a9ede5f0cc1c560195a47a18e0ab98bf4346705d3241f4f352908c7014
-
Size
1.4MB
-
MD5
d885edccd0e9331cc3d9a453325032ce
-
SHA1
d1e02541e04eaca8e3bd04a3d0ea4a20ba46e2cc
-
SHA256
53c678a9ede5f0cc1c560195a47a18e0ab98bf4346705d3241f4f352908c7014
-
SHA512
c9c09480f3ab5f5f8f2dc5dbe6c25598c990959933e6bd9571c560d252f6e2f5a8b3c47923a275c6048e6931c2f9f4d13ed792f772d6541bc7193fd97773e35c
-
SSDEEP
24576:9rPzdeYqZxmhVBJ78xWYzpHYUs09e3VJ3y3gJeyAl9aoCn9aoCn9aoCFltdTq88D:BrAY9zZA5zp4UNe3VcwTAlVgVgVmu8LV
Malware Config
Signatures
-
Detects executables packed with ConfuserEx Mod 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_ConfuserEx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53c678a9ede5f0cc1c560195a47a18e0ab98bf4346705d3241f4f352908c7014
Files
-
53c678a9ede5f0cc1c560195a47a18e0ab98bf4346705d3241f4f352908c7014.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
GNFyJ Size: 678KB - Virtual size: 678KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 777KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ