Static task
static1
Behavioral task
behavioral1
Sample
Backend.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Backend.dll
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
Stand for FH5.exe
Resource
win7-20230621-en
Behavioral task
behavioral4
Sample
Stand for FH5.exe
Resource
win10v2004-20230621-en
General
-
Target
Stand.for.FH5.1.0.7.zip
-
Size
21KB
-
MD5
aa616de9dbde14939383fe75314f33b8
-
SHA1
9223a533befc1a65781266f3e1ff52abc1b70b86
-
SHA256
01fbd3ba63bf9385eeb9d47cca743441f93715be5778fe6f39e548d5808612ae
-
SHA512
7646a553d8d95737d5290901793caae43ed3934a0142fd2358d229877e7fb016c69c889ce68f5e694cbad3591369e93ed6227731bf04adb47e2ee225d8d3fee6
-
SSDEEP
384:Bz3zLtr4HU5l4dxZ6F7Hpy0mlQrjqToJdgzph5JaHsnOs41oyNJrUx6NFGtw:/E05UZ6F7H00ljgoJolc1ogJrxFGO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Stand for FH5.exe
Files
-
Stand.for.FH5.1.0.7.zip.zip
-
Backend.dll
-
Stand for FH5.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ