Static task
static1
Behavioral task
behavioral1
Sample
aaafc5080a18be86b1326dd997aa4086c5e36ce005f34c4c4a3120d2ce6c378cN.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aaafc5080a18be86b1326dd997aa4086c5e36ce005f34c4c4a3120d2ce6c378cN.exe
Resource
win10v2004-20240802-en
General
-
Target
aaafc5080a18be86b1326dd997aa4086c5e36ce005f34c4c4a3120d2ce6c378cN.exe
-
Size
2.0MB
-
MD5
66bc445061a0296ca7adf27085e72ee0
-
SHA1
8c8521a9568ef99e0ddb282266fdea70647c76a0
-
SHA256
aaafc5080a18be86b1326dd997aa4086c5e36ce005f34c4c4a3120d2ce6c378c
-
SHA512
a5e764d4a68cf66073f37747b5a5b38bf71e5f1998f3ed5e29ae8abe182152a98167fe3b18ee92644b8d741de3148f1a13c50fbc2a3702a7502065ec19516cb8
-
SSDEEP
24576:383Oz6NMVABlKLRYI6F6AOg9F4zNxyHwYJJGNB5K14ZVQkblCc7FOhqDv/1zR1vu:383Oz66s6X6F6AOgj4aKX7k8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaafc5080a18be86b1326dd997aa4086c5e36ce005f34c4c4a3120d2ce6c378cN.exe
Files
-
aaafc5080a18be86b1326dd997aa4086c5e36ce005f34c4c4a3120d2ce6c378cN.exe.exe windows:4 windows
a5aafccee9ffcb4a78d8b3b27ac4149e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetUserDefaultLCID
user32
GetMessageTime
GetDialogBaseUnits
Sections
.text Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE