Static task
static1
Behavioral task
behavioral1
Sample
fd0d5e94af637a6270fb09d1b157119c4e5b339cbd9f7f971ed08733985739f3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fd0d5e94af637a6270fb09d1b157119c4e5b339cbd9f7f971ed08733985739f3.exe
Resource
win10v2004-20230220-en
General
-
Target
fd0d5e94af637a6270fb09d1b157119c4e5b339cbd9f7f971ed08733985739f3.exe
-
Size
835KB
-
MD5
4c0a127de143c39b7a6fdf5eed1ecff9
-
SHA1
06d71a12b59daec6de94ed79abf4c4896f9a751f
-
SHA256
fd0d5e94af637a6270fb09d1b157119c4e5b339cbd9f7f971ed08733985739f3
-
SHA512
7bc6dfbe3fea42e8d7b4d7e67c62ed2e09968ee541d6d4810f02b021974e0b0512b6536fc57d2f0683c0d0776fa452beff853838ab8ed973ed76f93be03ec319
-
SSDEEP
12288:QG7/9WflU/9FDhwFsI4ooI05IySyA2Eb/ajJ0xO2RBFTGgFYmdeka/Vtv6y:dylUVwFs75IySxRLaJ0xOOBFyjmHanl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd0d5e94af637a6270fb09d1b157119c4e5b339cbd9f7f971ed08733985739f3.exe
Files
-
fd0d5e94af637a6270fb09d1b157119c4e5b339cbd9f7f971ed08733985739f3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 831KB - Virtual size: 831KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ