Static task
static1
Behavioral task
behavioral1
Sample
aab54aaf2c6ad9d161f487b1936cd7d62524243db0db90a9574d7b21ce4fbac1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aab54aaf2c6ad9d161f487b1936cd7d62524243db0db90a9574d7b21ce4fbac1.exe
Resource
win10v2004-20241007-en
General
-
Target
aab54aaf2c6ad9d161f487b1936cd7d62524243db0db90a9574d7b21ce4fbac1
-
Size
219KB
-
MD5
cf3b490a37a73d4d77dd684024aaf7c7
-
SHA1
9fb43270ae0c912ea2aba598888a5ef51cb98580
-
SHA256
aab54aaf2c6ad9d161f487b1936cd7d62524243db0db90a9574d7b21ce4fbac1
-
SHA512
e640ccfb8998a63465e44b2414e1dc6c759ccf22ead4993d074ef6e77e8d19e267dad68b8f59e37e9cbcf1215ed39f43c1471e05e6cab99b84db4e7114250b62
-
SSDEEP
6144:5rW/2QVVmeWPpW4DxG7K3LpHPmsXANdQIN2CrKric:9WexeapW8hb1m5TQoeWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource aab54aaf2c6ad9d161f487b1936cd7d62524243db0db90a9574d7b21ce4fbac1
Files
-
aab54aaf2c6ad9d161f487b1936cd7d62524243db0db90a9574d7b21ce4fbac1.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 207KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pepack Size: 177B - Virtual size: 177B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ