Static task
static1
Behavioral task
behavioral1
Sample
ae9efe63a27c58ec7a3e2de2bd73dc53114a8dc0d46b9a7ecc8c962d2ef026ab.exe
Resource
win7-20240611-en
General
-
Target
ae9efe63a27c58ec7a3e2de2bd73dc53114a8dc0d46b9a7ecc8c962d2ef026ab
-
Size
6.0MB
-
MD5
9c89477b770823d77a13dc386c8c65fb
-
SHA1
e4b27bf9be01cd5404171a771d280f559fb092ae
-
SHA256
ae9efe63a27c58ec7a3e2de2bd73dc53114a8dc0d46b9a7ecc8c962d2ef026ab
-
SHA512
471981c52965cdcbb8dcaa76fab2c1467d265ee18ea9be7446a6de36761307dd88a91d6bb7a97e3768a65a4c0f3a7268db8d8986a2771ca9478d15adbe008df2
-
SSDEEP
98304:YMgg7r8eKjk2oY+gSkPsx33h3iLGoS3qV01y8O8i/:YMgHeKwLXgYxHhSLGvqV01y8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae9efe63a27c58ec7a3e2de2bd73dc53114a8dc0d46b9a7ecc8c962d2ef026ab
Files
-
ae9efe63a27c58ec7a3e2de2bd73dc53114a8dc0d46b9a7ecc8c962d2ef026ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 840KB - Virtual size: 840KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 60B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 502KB - Virtual size: 502KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detour Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 2.1MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE