Static task
static1
Behavioral task
behavioral1
Sample
aa3bd73d9f92aaaa5dda1c2029261993a350069ccc423b39ab3bb40992b4e3d3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aa3bd73d9f92aaaa5dda1c2029261993a350069ccc423b39ab3bb40992b4e3d3.exe
Resource
win10v2004-20240508-en
General
-
Target
aa3bd73d9f92aaaa5dda1c2029261993a350069ccc423b39ab3bb40992b4e3d3
-
Size
12KB
-
MD5
61033da9556451fa0f28034a51e9c44e
-
SHA1
c6e3d7ab66ba5134a2bbda82c85e90dfeb947304
-
SHA256
aa3bd73d9f92aaaa5dda1c2029261993a350069ccc423b39ab3bb40992b4e3d3
-
SHA512
a16cdfcaaa647cc63634dbe1f6763fe0a53e340c50c74def833486575730765fe31d0e6ce9a2350984a8f340ac1fd32131ce51fd78d89b1cd0fc16e84fd1edb0
-
SSDEEP
384:AL7li/2z1q2DcEQvdQcJKLTp/NK9xaH+:elMCQ9cH+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa3bd73d9f92aaaa5dda1c2029261993a350069ccc423b39ab3bb40992b4e3d3
Files
-
aa3bd73d9f92aaaa5dda1c2029261993a350069ccc423b39ab3bb40992b4e3d3.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ