Static task
static1
Behavioral task
behavioral1
Sample
aef648c09949869c2756c325a589a77be6b625ac0bc9c333741651da95705bdd.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
aef648c09949869c2756c325a589a77be6b625ac0bc9c333741651da95705bdd.exe
Resource
win10v2004-20241007-en
General
-
Target
aef648c09949869c2756c325a589a77be6b625ac0bc9c333741651da95705bdd
-
Size
425KB
-
MD5
bac552a95d6fe351faa57c609d34d8b3
-
SHA1
35b3afe8a60a0127ee570ee3f135e3f96a410805
-
SHA256
aef648c09949869c2756c325a589a77be6b625ac0bc9c333741651da95705bdd
-
SHA512
391fbc88ed0c962cf61bf21f7bf6e104ede5f66d3844ce0142ad3e5c001295fdd04e3a2d7e5ba369af78f8b85a8e542bc32c44ba18c801b3b8766b76a27a5678
-
SSDEEP
12288:zJFKXyvba0JDNEm/P0cJL+deJJFlpyQcIQAGgqGM0F:zzbWKDNEm/ccJL+deJ8IrGJGM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aef648c09949869c2756c325a589a77be6b625ac0bc9c333741651da95705bdd
Files
-
aef648c09949869c2756c325a589a77be6b625ac0bc9c333741651da95705bdd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ