Static task
static1
Behavioral task
behavioral1
Sample
2aac8a64bb774f5491ab956d0e6070ca7c72ce182a10e4db22ad993ee7b7b85c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2aac8a64bb774f5491ab956d0e6070ca7c72ce182a10e4db22ad993ee7b7b85c.exe
Resource
win10v2004-20240426-en
General
-
Target
2aac8a64bb774f5491ab956d0e6070ca7c72ce182a10e4db22ad993ee7b7b85c
-
Size
4.5MB
-
MD5
35fe0fa5f4c66e02540db07eebaa7951
-
SHA1
1f95cb88d059cbbbcbf7dae68992fb9a577475d4
-
SHA256
2aac8a64bb774f5491ab956d0e6070ca7c72ce182a10e4db22ad993ee7b7b85c
-
SHA512
1b919ab6c4c1ccb86b7a98fbf3f711f0d3536cddf6c9a3f112679c664d967e9e234f247ced1986b434eb141f4b8bce3990303e174d293ca1b3cbae69d9181106
-
SSDEEP
98304:hs8ezhLJt64HiYF63ZvdnlKf98ey2Gn7SBe19jEKB+lLZBwduU8mJtJ4moG:oPtliYQZvd8eey2Goc9jELcZNJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aac8a64bb774f5491ab956d0e6070ca7c72ce182a10e4db22ad993ee7b7b85c
Files
-
2aac8a64bb774f5491ab956d0e6070ca7c72ce182a10e4db22ad993ee7b7b85c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 368KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 776KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 36KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ