Static task
static1
Behavioral task
behavioral1
Sample
AIO checker 2024.exe
Resource
win7-20240215-en
General
-
Target
AIO checker 2024.exe
-
Size
12.6MB
-
MD5
9cf1d0469c0f1f4d320a9ca7f0e1cc60
-
SHA1
0dfb9cbecc894900df50ea91d6abc8064f7b3f4f
-
SHA256
28fd7c5f8ab145889653beee671957a07696794f4b0ac7343d5c25e43f66042b
-
SHA512
dee7e42a3e35759cdfa5b7ee4b76fab187b526478a4d47b41562a60e4970f755499faea1a33038ffe65d9ad5d916287ba7a54911a0fbf6ae3d0b47738329abdf
-
SSDEEP
196608:/nmvZD+tHWdKFyGL1fCQfV1ZvD+z/hcc1ICaivxj2RMvV+TfiwFrxuakIdxG:/na1+tHjN9fVL7+z63ivxjhUzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AIO checker 2024.exe
Files
-
AIO checker 2024.exe.exe windows:6 windows x86 arch:x86
90a754824211c648b161e0e146d30cbf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetObjectContext
kernel32
SetEndOfFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cSs Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cHM Size: - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.f</ Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.J`F Size: 12.6MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ