Static task
static1
Behavioral task
behavioral1
Sample
aebcca33b2299984fbb9658584d0b500N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aebcca33b2299984fbb9658584d0b500N.exe
Resource
win10v2004-20240802-en
General
-
Target
aebcca33b2299984fbb9658584d0b500N.exe
-
Size
886KB
-
MD5
aebcca33b2299984fbb9658584d0b500
-
SHA1
584ef4ff81ad4e8fe18dd477b52d888dce31b16b
-
SHA256
0b00880da713be04f04cbedd9410855e1a39624a310161d354509b7c95961917
-
SHA512
cb5ee05019eb304feb5d2d22e54793c9762d4d4672467256efc387a2c4a1d43ac717a7e2ab91ebd6fc40b43458d5759e3f430349d4d5f3e30d4c7e170888381f
-
SSDEEP
24576:limNngU3mP+e+b4xAc1WGnPf/+/thnJiX:lAme+c1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aebcca33b2299984fbb9658584d0b500N.exe
Files
-
aebcca33b2299984fbb9658584d0b500N.exe.exe windows:4 windows x86 arch:x86
c825d892ec1994311831ac7bb64ddf1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket
kernel32
Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess
oleaut32
SysAllocStringLen
SysFreeString
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE