Static task
static1
Behavioral task
behavioral1
Sample
aa796244a35005f02b75ab5520167aacb66d52903ceb51ffaeaa6f2a1006a6eb.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa796244a35005f02b75ab5520167aacb66d52903ceb51ffaeaa6f2a1006a6eb.exe
Resource
win10v2004-20240730-en
General
-
Target
aa796244a35005f02b75ab5520167aacb66d52903ceb51ffaeaa6f2a1006a6eb
-
Size
96KB
-
MD5
636ea616298f771d84048c95b4cacd6e
-
SHA1
6198fe4fd28ebf4727796d5e8c89cb9af1120535
-
SHA256
aa796244a35005f02b75ab5520167aacb66d52903ceb51ffaeaa6f2a1006a6eb
-
SHA512
dcdf0be6bc7ec4e368f5b13419e4a76dded6002a4170f0e82a8b26bea3bcb0032852fbcecf9cf6d716df83e9c1d096b8befbd62b9379acd812968f4a9d538ae7
-
SSDEEP
1536:mAzcV9MAMJWN1m4Wyg548UJ/UxuhgR+duV9jojTIvjrH:mVV9MAMK1m4Wyg5swuWR+d69jc0vf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa796244a35005f02b75ab5520167aacb66d52903ceb51ffaeaa6f2a1006a6eb
Files
-
aa796244a35005f02b75ab5520167aacb66d52903ceb51ffaeaa6f2a1006a6eb.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ