Static task
static1
Behavioral task
behavioral1
Sample
aa88e07985a5c286bb982fddf604b56a2cc4ee786c85ac0fe49623c37bbdcaf2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aa88e07985a5c286bb982fddf604b56a2cc4ee786c85ac0fe49623c37bbdcaf2N.exe
Resource
win10v2004-20241007-en
General
-
Target
aa88e07985a5c286bb982fddf604b56a2cc4ee786c85ac0fe49623c37bbdcaf2N
-
Size
41KB
-
MD5
2a41829b9eab6c5ac71228c7750db290
-
SHA1
7b1ddaa026049c1ad6cdef30c20d52eca969c7b1
-
SHA256
aa88e07985a5c286bb982fddf604b56a2cc4ee786c85ac0fe49623c37bbdcaf2
-
SHA512
3cfe6996e5f29032b1eb063207de203a6869fcb880902e0020c78a36d108286bbb232ceeecbfca85d9c65fb94f247909891d521db48a8d8a7c226c1b839a2bc3
-
SSDEEP
768:eo2hEDXa+FancTY1yho/GLMDfQWa3lZvM7CTOiP/k+JcLxc2B:t2hEDqdncTijGLMDf63fvM71iPeB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa88e07985a5c286bb982fddf604b56a2cc4ee786c85ac0fe49623c37bbdcaf2N
Files
-
aa88e07985a5c286bb982fddf604b56a2cc4ee786c85ac0fe49623c37bbdcaf2N.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 37KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE