Static task
static1
Behavioral task
behavioral1
Sample
NEW_FOB_.scr
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NEW_FOB_.scr
Resource
win10v2004-20230220-en
General
-
Target
a5d892b2eef7f5e40ef996f64654211b.bin
-
Size
1.2MB
-
MD5
a5d892b2eef7f5e40ef996f64654211b
-
SHA1
69dc6f1bae7619b1d868119d72de36ac4feb32fe
-
SHA256
71972c3ffccc868c32c8ae8b64c0770555f4e5841633344ecc8d70b317a734bc
-
SHA512
ae4f9a4f24e3791dfdd72fe81a46aa21c85daebcbd9633ab7005f2767d38d1c07e3ad548593eb304f218f0ab1c0d2c5adba234b4e5be4fd26bf19a94764c3657
-
SSDEEP
12288:mYjv5PMRJT8cjr9fN3AJfM0UJlkeEVcrgMqQb0jJmA1H:jpkQcjr9flAO0UJyJVp8olma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NEW_FOB_.SCR
Files
-
a5d892b2eef7f5e40ef996f64654211b.bin.iso
-
NEW_FOB_.SCR.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 582KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ