Static task
static1
Behavioral task
behavioral1
Sample
0aa9199bb7fbf267b0e96f69ae8abb6e3c6ee5d9f8c2f61d4b56104063888b26.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0aa9199bb7fbf267b0e96f69ae8abb6e3c6ee5d9f8c2f61d4b56104063888b26.exe
Resource
win10v2004-20240508-en
General
-
Target
0aa9199bb7fbf267b0e96f69ae8abb6e3c6ee5d9f8c2f61d4b56104063888b26.exe
-
Size
659KB
-
MD5
9f0eb3d96ffa433e7919dc077e57dd94
-
SHA1
7dafccb0772054b234acdf5fdf4d05d40b96b312
-
SHA256
0aa9199bb7fbf267b0e96f69ae8abb6e3c6ee5d9f8c2f61d4b56104063888b26
-
SHA512
578b7d2bb85e122f2d04f899c946ec46bfde0d58f58f38a63960500249d8cfd3279b7f48dbf1f6fa300cadf9165e49671aca9c42aaec70f015de51046f273c36
-
SSDEEP
12288:8lYifTZDiEE/OPL/CiHGWBTtm1Yg3YIgXLPbLChUmP+fafkWke+Ca8w:ril+Vu6iHGkRm1V3YZXjChrP+HWke+CY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0aa9199bb7fbf267b0e96f69ae8abb6e3c6ee5d9f8c2f61d4b56104063888b26.exe
Files
-
0aa9199bb7fbf267b0e96f69ae8abb6e3c6ee5d9f8c2f61d4b56104063888b26.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 654KB - Virtual size: 654KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ