Static task
static1
Behavioral task
behavioral1
Sample
Stand for FH5.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Stand for FH5.exe
Resource
win10v2004-20230621-en
General
-
Target
Stand for FH5.exe
-
Size
54KB
-
MD5
5003813e9fe6a203e22f0b31e124dcbe
-
SHA1
597740f256718cb7994e9386b27187e355213007
-
SHA256
bce4a79ef952068235f10470c2209ba504214088f9679f56d7dc877c8798cda2
-
SHA512
b93e27a498a2326e1af1fbb6b857f741968362176ff75d31741d67cbd93881b208fd6234462554e3a022fdc121f44c22b481fedb314f4860a12b6e16f4e9251a
-
SSDEEP
384:FGdhJJxZhQuap4P/pwOYIoEXQYaE2uDjRO6/ibkvwKwq6uiPmo/PmU:FUhv5foEXyE/3ixeseU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Stand for FH5.exe
Files
-
Stand for FH5.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ